PL-400: Microsoft Power Platform DeveloperDemo

This is the classic Dataverse minimum-privilege mapping. The full owner/administrator who manages the environment and all data gets System Administrator; the person who only customizes tables, forms and business logic gets System Customizer (which grants customization rights without broad data access); the maker who only builds apps, flows and connections gets Environment Maker (which has no data privileges); and every employee who simply uses apps and works with their own records gets the baseline Common Data Service User (Basic User) role. Both the automated key and the independent solver agree on all four assignments, and each role is the least-privileged one that still satisfies its user's stated need. Assigning a broader role such as System Administrator to the general workforce would violate least privilege.