Question

Your organization has enabled a managed development environment where five developers build solutions collaboratively. The security team requires that developers can create, edit, and import solutions and customize entities, but must NOT be able to grant themselves or others administrative roles, manage environment settings, or delete the environment. As the Power Platform administrator, what is the most appropriate way to assign access following least-privilege principles?

Accepted Answer

Assign each developer the System Customizer security role and grant environment membership without adding them to the Environment Admin role.

Answer

Assign each developer the System Administrator security role in the environment so they have full flexibility during development.

Answer

Add each developer to the Environment Admin role in the Power Platform admin center and remove all Dataverse security roles.

Answer

Assign each developer the Basic User security role and create a sharing rule for the solution components.