QuestionQ153

Develop integrations

You are developing an integration that uses an Azure function to create records in the Common Data Service when leads are submitted through your company website.

You create a user and assign the user the Basic User security role.

You do not have administrator access to the environment being used or access to Azure Active Directory. Company policy requires service accounts for integrations, and integrations must not receive privileges beyond those necessary.

You need to recommend actions an administrator should take to configure access for the Azure Function.

Which three actions should you perform? Each correct selection presents part of the solution.

NOTE: Each correct selection is worth one point.

Choose three
  • A Create an application registration in Azure Active Directory.
  • B Assign the system administrator security role to the application user.
  • C Assign the Power Platform administrator role to the application user in Azure Active Directory.
  • D Create a new security role with the minimum required permissions and assign to the application user.
  • E Grant the application delegated permissions to the Dynamics CRM API in Azure Active Directory.
  • F Deploy Azure B2B guest permissions to the application user.
Explanation

A service-to-service Common Data Service (Dataverse) integration uses an Azure AD application registration and an application user. The application must be authorized for the Dynamics CRM API, and the application user should receive a custom security role containing only the permissions required to create the relevant records. Broad administrator roles would violate least privilege.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!