Selecting Service Bus SAS permissions for a two-way on-premises listener
You are developing a Power Platform app. The app must implement a two-way listener to an on-premises system by using Microsoft Azure Service Bus. You create an Azure Service Bus namespace and messaging entity. You must add the shared access policies. You need to select the permissions for the messaging entity. Which two permissions should you use? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Community Votes
100% of anonymous learners picked answer BD. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
Service Bus SAS permissions are scoped to the operations a client needs. Send allows posting messages to the entity; Listen allows receiving them. A two-way integration requires both, whereas Read and Manage are unrelated to the basic send/receive flow.
A two-way listener both sends messages to and receives messages from an Azure Service Bus entity. The shared access policy must therefore include Send (to publish messages) and Listen (to receive messages). Manage and Read are not required for this send/receive pattern.
Including Manage (E) or Read (C), or picking a security role like System customizer (A). Manage grants full control and is unnecessary; Read/System customizer are not Service Bus SAS permissions at all.
Community Discussion (3 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
For a two-way listener the app must both publish to and consume from the Service Bus entity. The Send permission authorizes posting messages, and the Listen permission authorizes receiving them. Granting Send and Listen on the shared access policy satisfies the two-way requirement.Why the Other Options Are Wrong
Manage (E) grants full control and is not needed for send/receive. Read (C) is not a Service Bus SAS permission for messaging entities. System customizer (A) is a Dataverse security role, not a Service Bus permission. Only B (Listen) and D (Send) apply.Community Comment Notes
Juan0414 (likes=1) selects B and D and links the Service Bus SAS documentation. greendend (likes=2) and Faissalelb (likes=2) also confirm Listen and Send are correct.Official Reference
Related Analysis
Practice All PL-400 Questions
Access 85 questions with complete answers and detailed explanations.
View Full PL-400 Practice Test →