Question
You are a Dynamics 365 Customer Services administrator. You have a Production instance and Sandbox instance.
Users record Production instance data in the Sandbox instance.
You need to ensure that the users only record data in the Production instance.
Which security function needs to be edited to prevent access to the Sandbox? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Explanation
Microsoft 365 admin center: Groups — Access to a Dynamics 365 / Dataverse environment is gated by the Microsoft 365 (Microsoft Entra ID) security group that is associated with that environment, so in the admin center you edit the security group membership and remove the users who should not touch the Sandbox; once a user is outside the group linked to the Sandbox instance, they are disabled in that environment and cannot sign in to it. Licenses is not the answer because the users still need their Dynamics 365 licenses to work in Production, and removing a license would block both environments rather than just the Sandbox.
Dynamics 365 Sandbox instance: Roles — Inside the Sandbox environment itself, access is controlled by security roles: a user with no security role assigned in that environment has no privileges and cannot open or record data there, so you edit the role assignments in the Sandbox to strip the users' access. Access rights (read, write, append, and so on) are not edited directly per user — they are the privileges defined inside a security role, so the security role is the object you actually modify.
