Question

You built a PCF code component that reads and writes records in a custom Dataverse table named Contract Approvals. The component will be embedded on a form used by approvers. Security requirements state that approvers must have only the minimum privileges needed for the component to function, and they should not gain broad access to other tables. What should you do to grant the required Dataverse privileges following least privilege?

Accepted Answer

Create a custom security role granting only Read and Write privileges on the Contract Approvals table at the appropriate scope, and assign it to the approvers.

Answer

Assign the approvers the System Administrator security role so the PCF component can perform all operations reliably.

Answer

Add the Contract Approvals table privileges to the PCF component manifest so the control elevates permissions automatically at runtime.

Answer

Enable field-level security on all columns of the Contract Approvals table and assign approvers the System Customizer role.