Dataverse Security Roles

Purpose: emit Dataverse security roles + field security that enforce least privilege across every surface (model-driven, canvas, flows, plugins, portals all honor them).

When to Use

• Defining who can read/write each table for an app from a PRD-LOWCODE
• Adding a least-privilege role for a new persona
• Reviewing whether a role over-grants Org-wide access

The Model: Privilege x Access Level

A role grants, per table, a set of privileges (Create, Read, Write, Delete, Append, AppendTo, Assign, Share) each at an access level (depth):