PL-400: Microsoft Power Platform DeveloperDemo

In Power Platform, a security group controls who can access an environment, while a Dataverse security role controls who can run a model-driven app. Assigning TestSG as the test environment's security group restricts that environment to test users only, and adding all department users to TestSG later grants them access to the test environment. In production the environment is left open (no security group), so access to the app is gated purely by the app's security role: assigning it to the manager alone means only the manager can use the app, and later assigning it to the test users lets them use the app in production. Setting the production environment's security group to TestSG would be wrong for the test-users-in-production step because the manager is not a member of TestSG and would lose access to production, contradicting the earlier requirement.