Selecting Service Bus SAS permissions for a two-way on-premises listener
Short answer
BD A two-way listener needs Send to push messages to the Service Bus entity and Listen to receive them, so grant the Send and Listen SAS permissions.
Question
Key Takeaways
Service Bus SAS permissions are scoped to the operations a client needs. Send allows posting messages to the entity; Listen allows receiving them. A two-way integration requires both, whereas Read and Manage are unrelated to the basic send/receive flow.
A two-way listener both sends messages to and receives messages from an Azure Service Bus entity. The shared access policy must therefore include Send (to publish messages) and Listen (to receive messages). Manage and Read are not required for this send/receive pattern.
Common mistake: Including Manage (E) or Read (C), or picking a security role like System customizer (A). Manage grants full control and is unnecessary; Read/System customizer are not Service Bus SAS permissions at all.
Expert Analysis
Why the Answer Is Correct
For a two-way listener the app must both publish to and consume from the Service Bus entity. The Send permission authorizes posting messages, and the Listen permission authorizes receiving them. Granting Send and Listen on the shared access policy satisfies the two-way requirement.
Why the Other Options Are Wrong
Manage (E) grants full control and is not needed for send/receive. Read (C) is not a Service Bus SAS permission for messaging entities. System customizer (A) is a Dataverse security role, not a Service Bus permission. Only B (Listen) and D (Send) apply.
Community Comment Notes
Juan0414 (likes=1) selects B and D and links the Service Bus SAS documentation. greendend (likes=2) and Faissalelb (likes=2) also confirm Listen and Send are correct.
Official Reference
This link opens the official vendor documentation in a new tab.
Community Votes
100% of anonymous learners picked answer BD. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 3
-
greendend 👍 2100% correct read the link from the description: https://learn.microsoft.com/en-us/power-apps/developer/data-platform/walkthrough-configure-azure-sas-integration
-
Juan0414 👍 1BD https://learn.microsoft.com/en-us/azure/service-bus-messaging/service-bus-sas#shared-access-authorization-policies
-
Faissalelb 👍 2seems correct
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All PL-400 Questions
Access 85 questions with complete answers and detailed explanations.
View Full PL-400 Practice Test →