Dataverse Security Strategy for Departmental Apps
Short answer
B Use a business unit for each department with a security role for each department and a hierarchy security model.
Question
Key Takeaways
Tests the ability to isolate data access per department while maintaining organizational structure; the trap is assuming a single unit suffices because data must eventually be shared.
Designing a secure Power Platform environment requires aligning business units and security roles with departmental isolation requirements. This analysis confirms that separating departments into distinct business units with specific roles is the correct approach.
Common mistake: Choosing one business unit (Options C or D) fails to provide the necessary logical separation for department-specific apps and initial data isolation described in the current environment.
Expert Analysis
Why the Answer Is Correct
Option B is the correct design because it establishes clear boundaries between the Sales, Construction, and Warranty departments. By creating a business unit for each department, you enforce the requirement that "Employees must be able to access only their department’s app" and respect the current state where information is not shared. Assigning a security role for each department ensures that permissions are granular and aligned with job functions. The hierarchy security model allows for scalable permission management across these units, ensuring that as the organization grows, security policies remain consistent and manageable.Why the Other Options Are Wrong
Option A lacks the hierarchy security model, which is essential for managing permissions across multiple business units efficiently in a complex enterprise scenario. Option C suggests a single business unit, which contradicts the need for departmental isolation and custom apps restricted to specific departments. Option D also uses a single business unit, failing to provide the logical separation required to prevent cross-departmental data leakage before the consolidation phase is fully implemented and secured.Community Comment Notes
The community is divided, but the majority supports B. As user WASSIM2020 noted, "A business unit for each department creates logical separation... important because the departments need to access only their own data." Some users like HX and Kyol argue for D, suggesting that since data must be shared, separate units are unnecessary. However, this overlooks the requirement for department-specific apps and the principle of least privilege during the development and initial deployment phases.Official Reference
https://learn.microsoft.com/en-us/power-platform/admin/security-roles-business-units
This link opens the official vendor documentation in a new tab.
Exam Strategy
Always map the 'access only their department's app' requirement to Business Units. If departments need isolated views or apps initially, they should have separate Business Units, even if data sharing is planned later.
Frequently Asked Questions
Why use hierarchy security model?
Can we share data with separate business units?
Community Votes
62% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 5 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 5
-
HX 👍 2 Answered DSome observation: Issues with Data Sharing: Sales, construction, and warranty information is not shared among departments. The construction team lacks visibility into contracts until sales are completed. Warranty employees frequently lack project scope details when visiting homes. Requirements for Collaboration: "All sales, contract, and warranty data must be shared among the departments." Employees must have access only to their department's app but data must flow seamlessly between departments.
-
WASSIM2020 👍 1 Answered BAnswer B A business unit for each department creates logical separation between the sales, construction, and warranty departments. This ensures that each department’s data and processes are isolated, which is important because the departments need to access only their own data and processes. A hierarchy security model is useful because it allows for role-based access across different levels of the organization. For instance, managers may need access to data across their entire department, while individual employees may only need access to data relevant to their role.
-
FaresAyyad 👍 1 Answered BB. a business unit for each department with a security role for each department and a hierarchy security model
-
loftuscheek 👍 1 Answered BB is correct , D is bad practice
-
Kyol 👍 1 Answered D100% D, don't believe the hype.
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.