Security model of Power Platform
Microsoft Power Platform runs on Microsoft Azure, and it benefits from all the security PaaS services available in the hyperscaler, such as Microsoft Sentinel, Microsoft Defender for Cloud, the comprehensive audit logs of Microsoft Entra, and much more.
The security model of Microsoft Power Platform is built on the principle of least privileged access (LPA), which facilitates the creation of applications with finer access control levels. Power Platform leverages the Microsoft Identity Platform for the authorization of all API requests, utilizing the widely recognized OAuth 2.0 protocol. Additionally, Dataverse, which serves as the foundational data layer for Power Platform, boasts a comprehensive security model that encompasses security at the environmental level, role-based, and record- and field-level security, security roles, and business units and teams through security groups and application users, as we learned about in Chapter 4.
Additionally...
