PL-200 Exam QuestionsBrowse all questions from this exam

PL-200 Exam - Question 15


DRAG DROP -

You need to recommend a role for users to perform several required tasks. The solution must use the principle of least privilege.

Which roles should you recommend? To answer, drag the appropriate roles to the correct functions. Each role may be used once, more than once, or not at all.

You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Select and Place:

Show Answer
Correct Answer:

Box 1: Office 365 Global Administrator

You may think that the Dynamics 365 system administrator would have power to do all the actions needed to manage Dynamics 365, but this is not the case.

What's different in Microsoft cloud deployments is that licenses and user accounts are managed in Office 365 by an Office 365 Global Administrator. This role is analogous to a network administrator for an on premises deployment. The Global Administrator is the only role to create new user accounts and assign subscription licenses for Dynamics 365 (and other Office 365 apps such as Skype, Power BI and SharePoint).

Box 2: Dynamics 365 system administrator

The Dynamics 365 system administrator may assign roles and permissions to the Dynamics 365 user within an instance of Dynamics 365. The Dynamics 365 system administrator also controls all the settings in Dynamics 365.

Box 3: Dynamics 365 admin -

The Dynamics 365 admin can perform backups and restores.

Reference:

https://docs.microsoft.com/en-us/power-platform/admin/use-service-admin-role-manage-tenant https://community.dynamics.com/crm/b/govandthecity/posts/understanding-dynamics-365-and-office-365-admin-roles

Discussion

17 comments
Sign in to comment
sammmmmmmm
Jun 3, 2021

Correct!

ezmark
Apr 23, 2022

There is no role as 'Dynamics 365 service administrator'. Both Dynamics 365 administrator and Power Platform administrator are service admin type roles. So backup can be performed by Global admin or Dynamics 365 admin and the least privilege is with Dynamics 365 admin. My answers are: Office/Microsoft 365 global administrator, Dynamics 365 admin and Dynamics 365 admin. https://docs.microsoft.com/en-us/power-platform/admin/use-service-admin-role-manage-tenant#service-administrator-permission-matrix

Rastinan
May 11, 2022

There use to be a Dynamics 365 service admin role which was introduced by MS in 2017. As you've rightly pointed out, this doesnt exist anymore, but the answers shown are more than likely correct based on the time that the question was added into the question pool

trtrt
Jun 17, 2022

I had this question this week. Its bad that the question is not updated. What should be the correct answer then?

DVK76
Dec 14, 2021

Keep in mind "the principle of least privilege"

Sujadocs
Aug 22, 2022

This question was NOt part of the exam in Aug 2022

[Removed]
Feb 28, 2023

I used this documentation for my answer below. https://learn.microsoft.com/en-us/power-platform/admin/use-service-admin-role-manage-tenant Create users: Microsoft 365 Global admin Assign roles to users: Microsoft 365 Global admin Perform backups for an instance: Dynamics 365 admin

nqthien041292
Mar 15, 2023

Agree with your answer

andy365
Apr 19, 2023

Create users: Microsoft 365 Global admin Assign roles to users: Dynamics 365 admin Perform backups for an instance: Dynamics 365 admin You don't need to be a Office 365 global admin to assign roles to users. You can do that with as a Dynamics 365 admin

andy365
Apr 19, 2023

Create users: Microsoft 365 Global admin Assign roles to users: Dynamics 365 admin Perform backups for an instance: Dynamics 365 admin You don't need to be a Office 365 global admin to assign roles to users. You can do that as a Dynamics 365 admin

SShrivastava
Aug 25, 2021

all answers are true . The Dynamics 365 service administrator can manage Dynamics 365 instances, such as performing backup and restore, copy and reset actions.

Sweden2022
Dec 14, 2023

Easy to remember those different roles: Global Administrator (Office 365): Keyword: Think "Everything." Rule: The Global Administrator has access to "Everything" in Office 365. Service Administrator (Office 365): Keyword: Think "Services." Rule: Service Administrators manage specific "Services" in Office 365. Service Administrator (Dynamics 365): Keyword: Think "Dynamics." Rule: Dynamics 365 Service Administrator deals with the "Dynamics" suite of applications. System Administrator (Dynamics 365): Keyword: Think "System-wide." Rule: Dynamics 365 System Administrator handles "System-wide" settings and customizations. These keywords and rules can help you associate each role with its primary focus and responsibilities.

39ecc66
Mar 10, 2024

was this on the exam when you took it? When did you take it?

SarAbd
Sep 19, 2021

in exam 16/09/2021

prpr3
Jan 13, 2022

On exam Jan 10, 2022

jmccolly
Mar 27, 2024

Create new users: Office 365 global admin Assign roles to users: D365 system admin Perform backups for an instance: D365 system admin From ChatGPT: Tasks Breakdown with Roles: Creating New Users: This task is within the purview of the Office 365 Global Administrator role, as it involves creating user accounts that are part of the Microsoft 365 tenant. Assigning Roles to Users (within Dynamics 365): After users are created at the tenant level, a Dynamics 365 System Administrator can then assign the appropriate Dynamics 365 roles to these users, tailoring their access and permissions according to their needs within the Dynamics 365 environment. Performing Backups for an Instance: This is a task that would typically fall under the responsibilities of a Dynamics 365 System Administrator, as it pertains directly to the management and maintenance of the Dynamics 365 environment.

HAZZTA
Jul 16, 2024

I tghink the given answer may be correct. This MS Lear article was updated 23/05/2024: https://learn.microsoft.com/en-us/power-platform/admin/use-service-admin-role-manage-tenant From another source: 'The Dynamics 365 service administrator can manage Dynamics 365 instances, such as performing backup and restore, copy and reset actions.'

ryan_hoang4949
Jul 14, 2021

Correct! D365 can only add users and assign roles to environments, not create. Both D365 and O365 can back up and store data but it follows the principle of least privilege.

Dilipkumar07
Jan 26, 2022

Correct

jkaur
Feb 22, 2022

Correct

sathis
Feb 28, 2022

Correct

Swams
Jul 8, 2024

The given answers are correct. FYI. https://learn.microsoft.com/en-us/power-platform/admin/use-service-admin-role-manage-tenant

HAZZTA
Jul 16, 2024

I think if you get this question in 2024, it's because they haven't update it so service admin for the backups must be correct for the question, even if no longer valid?? I am concerned now as MS updated the exam not to test on Power Virtual Agents anymore but I have a suspicion they won't update the pool of questions haha.