Architect a solution1 / 5
A Solution Architect is designing row-level security for a Dataverse solution. Salespeople should only see records they own, but a special support team needs to see all records in a specific table regardless of ownership. How should this be modeled?
CorrectNot quite
Alex
Dataverse security roles use access levels to control record visibility. User-level (Basic) access restricts users to records they own, while Organization-level (Global) grants access to all records regardless of ownership. Assigning salespeople user-level Read ensures they see only their own records; the support team gets organization-level Read for full table visibility. Organization-level access for everyone violates least-privilege principles. Separate environments add unnecessary complexity for a row-security problem. JavaScript filtering is client-side only and cannot enforce server-side security. Relying on training is not a security control.
Sourcelearn.microsoft.com
Create a free account to keep asking Alex — no credit card required.
Question 1 of 5
Get started free