PL-400: Microsoft Power Platform DeveloperDemo

By Microsoft · Question Mode

QuestionQ334

Extend the platform

You develop a plug-in that creates a row in a custom table.

Only certain users are permitted to create rows in that custom table.

You need to enable the plug-in to run for every user while following the principle of least privilege.

What should you do?

  • A Initiate the iOrganizationService by passing the ID of a user with permissions to create rows in the custom table.
  • B Ensure all users have been granted the Environment Maker role.
  • C Set Run in the User’s Context to Calling User in the plug-in step.
  • D Ensure all users have the Acton Behalf of Another User permission assigned to one of their security roles.
Explanation

A plug-in can create an IOrganizationService for a specified system user ID, so its data operation runs under that user's privileges. Using an account that has only the required permission to create rows in the custom table lets all users invoke the plug-in without granting that permission, or broader roles and impersonation rights, to every user.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!