Selecting Service Bus SAS permissions for a two-way on-premises listener

PL-400 By islever Editorial Last updated

Publish and consume Dataverse events

Short answer

BD A two-way listener needs Send to push messages to the Service Bus entity and Listen to receive them, so grant the Send and Listen SAS permissions.

Question

You are developing a Power Platform app. The app must implement a two-way listener to an on-premises system by using Microsoft Azure Service Bus. You create an Azure Service Bus namespace and messaging entity. You must add the shared access policies. You need to select the permissions for the messaging entity. Which two permissions should you use? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
  1. System customizer
  2. Listen Correct Answer
  3. Read
  4. Send Correct Answer
  5. Manage

Key Takeaways

Service Bus SAS permissions are scoped to the operations a client needs. Send allows posting messages to the entity; Listen allows receiving them. A two-way integration requires both, whereas Read and Manage are unrelated to the basic send/receive flow.

A two-way listener both sends messages to and receives messages from an Azure Service Bus entity. The shared access policy must therefore include Send (to publish messages) and Listen (to receive messages). Manage and Read are not required for this send/receive pattern.

Common mistake: Including Manage (E) or Read (C), or picking a security role like System customizer (A). Manage grants full control and is unnecessary; Read/System customizer are not Service Bus SAS permissions at all.

Expert Analysis

Why the Answer Is Correct

For a two-way listener the app must both publish to and consume from the Service Bus entity. The Send permission authorizes posting messages, and the Listen permission authorizes receiving them. Granting Send and Listen on the shared access policy satisfies the two-way requirement.

Why the Other Options Are Wrong

Manage (E) grants full control and is not needed for send/receive. Read (C) is not a Service Bus SAS permission for messaging entities. System customizer (A) is a Dataverse security role, not a Service Bus permission. Only B (Listen) and D (Send) apply.

Community Comment Notes

Juan0414 (likes=1) selects B and D and links the Service Bus SAS documentation. greendend (likes=2) and Faissalelb (likes=2) also confirm Listen and Send are correct.

Official Reference

Community Votes

BD
100%

100% of anonymous learners picked answer BD. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. greendend 👍 2
    100% correct read the link from the description: https://learn.microsoft.com/en-us/power-apps/developer/data-platform/walkthrough-configure-azure-sas-integration
  2. Juan0414 👍 1
    BD https://learn.microsoft.com/en-us/azure/service-bus-messaging/service-bus-sas#shared-access-authorization-policies
  3. Faissalelb 👍 2
    seems correct

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Practice All PL-400 Questions

Access 85 questions with complete answers and detailed explanations.

View Full PL-400 Practice Test →

← Back to PL-400 Study Guide