Question

A Power Platform administrator wants to ensure that only members of the Finance department can access a newly created production environment that contains sensitive Dataverse data. What is the recommended way to control which users can access this environment?

Accepted Answer

Associate a Microsoft Entra ID (Azure AD) security group with the environment

Answer

Apply a data loss prevention (DLP) policy that blocks all connectors in the environment

Answer

Delete the System Administrator security role from the environment

Answer

Set the environment type to Default so it is shared automatically