Developers can edit an agent in the maker portal, but frontline users only need to chat with the published agent in Teams. How should access generally be separated?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Builders get the workshop keys (maker roles); employees just use the finished robot in Teams. Making everyone System Administrator is how Production gets DIY rewiring.
Full explanation below image
Full Explanation
Least privilege separates maker rights from runtime channel usage. End users typically need access to the bot/app, not environment-wide admin roles.
Option A is correct.
Option B violates least privilege.
Option C breaks ALM/authorship.
Option D is a credential exposure anti-pattern.
Exam tip: Environment roles ≠ channel chat permission; design both deliberately.