Power Pages Site Security Configuration

PL-200 By islever Editorial Last updated

Short answer

B Using Microsoft Entra ID authentication alone does not meet the goal because it does not provide the necessary authorization controls to restrict managers to their specific store data.

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are building a Power Pages site for a supermarket chain. The company plans to have the managers of individual stores use the site. Managers will authenticate on the site each week by using their corporate identity to update stock information for their store. Managers must be able to add and update stock information for their store only. You need to configure the site security. Solution: Use Microsoft Entra ID authentication. Does the solution meet the goal?
  1. Yes
  2. No Correct Answer

Key Takeaways

The question tests the trap of confusing Authentication (who you are) with Authorization (what you can do). The common error is assuming identity verification automatically implies permission scoping.

This PL-200 question evaluates the distinction between authentication and authorization in Microsoft Power Pages. It establishes that while Entra ID handles login, it does not inherently enforce data-level access restrictions.

Common mistake: Candidates choose 'Yes' because they focus solely on the secure login aspect, failing to realize that Entra ID alone does not restrict users to their specific store's data without additional configuration.

Expert Analysis

Why the Answer Is Correct

The solution fails to meet the goal because it addresses only authentication, not authorization. While Microsoft Entra ID verifies the managers' corporate identities, it does not define the permissions required to limit them to updating stock information for their specific stores only. To achieve the stated security goal, you must configure a security profile and assign appropriate record-level permissions based on business units or teams.

Why the Other Options Are Wrong

Option A is incorrect because simply authenticating users does not grant them specific data access rights. Without explicit authorization rules, authenticated users might have broader access than intended or no structured access at all depending on default settings. The solution provided is incomplete for the requirement of restricting actions to specific records.

Community Comment Notes

Community feedback highlights this exact distinction. One commenter noted, "The scenario is not about Authentication. It's about Authorization," emphasizing that login is just the first step. Another user pointed out that fine-grained control requires more than just the identity platform, stating, "Fine-grained access control can be implemented using Microsoft Entra ID groups" but noting that the option didn't specify these configurations. The consensus among those who chose correctly was that the answer was insufficient as written.

Exam Strategy

Always distinguish between Authentication (login) and Authorization (permissions). If a solution mentions only logging in but asks for specific data access or role-based restrictions, the answer is likely 'No' unless it explicitly mentions security profiles or permissions.

Frequently Asked Questions

Why isn't Entra ID enough for Power Pages security?

Entra ID only handles authentication (verifying identity). It does not handle authorization (permissions), which is needed to restrict users to specific store data.

How do I restrict users to specific stores in Power Pages?

You must create Security Profiles and assign them to Teams or Users, then configure record-level permissions to limit access to specific business units or records.

More PL-200 FAQ →

Community Votes

A
69%
B
31%

69% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 6 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 6

  1. Tootru2bReal 👍 3 Answered B
    The scenario is not about Authentication. It's about Authorization. The managers need to be able to "add and update their records". Authentication is to get access to the app/site. Authorization you need permissions to actually do something once inside. Now, if the solution/answer stated using Entra ID and assigned to a security group that was assigned to a security profile with the appropriate permissions (authorization), then it would be Yes.
  2. killionb12 👍 3 Answered A
    Yes, using Microsoft Entra ID authentication meets the goal. Microsoft Entra ID (formerly known as Azure Active Directory) provides secure and scalable authentication, allowing managers to use their corporate identity to sign in. This ensures that only authenticated users can access and update stock information for their specific store
  3. ABDFormacion 👍 2 Answered A
    The answer is A. Yes. Here's why: Microsoft Entra ID authentication provides a secure and robust method for authenticating users. This aligns with the requirement for managers to use their corporate identity to authenticate. Fine-grained access control can be implemented using Microsoft Entra ID groups. You can create a group for each store manager and assign them permissions to update stock information only for their specific store. This ensures that managers can only modify data relevant to their store. Therefore, using Microsoft Entra ID authentication with appropriate group-based access control effectively meets the security goals outlined for the supermarket chain's Power Pages site.
  4. businesselements1 👍 2 Answered A
    --YES--https://learn.microsoft.com/en-us/entra/identity/authentication/overview-authentication ==> One of the main features of an identity platform is to verify, or authenticate, credentials when a user signs in to a device, application, or service.
  5. 91e9a8d 👍 2 Answered A
    From Microsoft perspective, corporate identity solution is Entra ID.
Show 1 more comment
  1. MajidAssikiou 👍 1 Answered B
    I agree with Tootru2bReal

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

How Do You Lock a Power Pages Chatbot to Entra ID Users?

S-grade

Preventing Table Display Name Changes in UAT

S-grade

Minimizing Dataverse Storage with SharePoint Integration

S-grade

Power Apps Environment Variable Resolution in Managed Solutions

S-grade

← Back to PL-200 Study Guide