A company asks you to help with the Power Platform security solution for the sales team that would significantly simplify the addition of the new users. The company wants to provide access to sales tables and records when a new salesperson joins the company. 
Please select the first step that you would advise the company to take to accomplish this requirement.

Answer options:

A.Create Dynamics 365 new Sales team
B.Create a new security role with access to sales data
C.Set the ownership of the sales tables to Organization
D.Create Azure AD group
E.Assign new role to the Sales team

Correct Answer: D 
The Dataverse security defines the three types of teams: Owner — this team owns the record and gives direct access to the team’s members.
Access — this team helps members to share a row in a form.
Azure AD group — this team`s membership is controlled by Azure AD. It has a similar behavior as the Owner team.
All users accessing Dataverse data are authenticated by Azure AD. The Dataverse provides a robust security model using business units, RBAC, and teams. Azure AD groups take the team membership control on the Azure AD level. 
The use of the Azure AD groups significantly simplifies adding or removing the Power Platform users. 
There are two types of Azure AD groups: Security and Office. 
The Security group members can be users, devices, service principals, and other AD objects. This group type provides access to the applications, resources, and assigns licenses to the group`s members. 
The Office group members are users only. This type is created for a collaboration using mailboxes, calendars, SharePoint, etc. 
You can use both of these groups for registration within the Dynamic 365 team. 
You can create an Azure AD group using Microsoft Office 365 Admin Center or Azure portal. 
In the Azure portal, open the Azure Active Directory and select the Groups item in the Manage section. On the next screen, select the New Group and create a new group. After you create a new group, open it, and on the Overview screen (Number 1), copy the Object ID GUID (Number 2). 

Then open the classic Power Apps interface by selecting the Advanced settings under the Settings icon. On the classic screen, select the Security item from the Settings dropdown and, next, select the Teams. Then click on the New button from the toolbar. The portal opens a new screen for New Team. You need to provide a Team name (Number 1), select an administrator (number 2), select the Team Type (Number 3). The team type should be the same as the type you selected when created the Azure AD group. And, finally, you need to provide an ObjectID GUID for the Azure AD group (Number 4). This will link the Dynamics 365 (Dataverse) team with the Azure AD group. 

After creating the Dataverse security team, you can create a role and assign it to the team. 
All other options are incorrect. 
For more information about Azure AD group security, please visit the below URLs: 

https://docs.microsoft.com/en-us/learn/modules/model-security/4-dataverse
https://docs.microsoft.com/en-us/power-platform/admin/manage-group-teams
https://rajeevpentyala.com/2019/07/06/working-with-azure-active-directory-aad-groups-in-dynamics-customer-engagement/