MB-240 study materials
MB-240 study resources

Tailspin Toys: Power Automate Reliability, Custom Connector Authentication, and Offline Power Apps

MB-240 · Put your knowledge to work in context.

All case studies

Tailspin Toys: Power Automate Reliability, Custom Connector Authentication, and Offline Power Apps

Tailspin Toys uses Dynamics 365 Field Service and Microsoft Power Platform. The company has a Power Automate flow that creates work orders from customer emails, a custom connector that calls an external address validation API, and a canvas Power App for technicians to capture on-site notes. The flow fails intermittently with missing required field errors. The custom connector authentication fails after 30 days. The canvas app works online but does not sync offline data. The company also wants to restrict access to a custom entity called Equipment Inspection to a specific team. They have 200 users, 50 technicians, and use Azure AD. They need a solution that is secure, scalable, and maintainable.

1. Why does the email-to-work-order flow fail intermittently, and how would you make it more reliable?

Read the worked answer

Intermittent missing required field errors usually mean the flow is trying to create a work order before all mandatory values are available, or a previous step returned null. Inspect the run history and identify which field is missing. Common culprits are service account, work order type, territory, system status, and incident type. Email parsing can also produce empty values when the customer writes in an unexpected format. Add validation before the create step: compose the required fields, check for null or empty values, and route invalid emails to a review queue instead of failing the flow. Use a child flow or a scope with configure run after to catch failures, log them to a Dataverse table, and notify the dispatch team. If the flow creates work orders through the Field Service connector, add the incident type explicitly after creation because the connector may not apply it automatically. Check the connection account has the correct Field Service security role, and add retry policy and concurrency control to avoid throttling when a large batch of emails arrives.

2. How would you fix the custom connector authentication failure, and what Azure AD and connector settings would you verify?

Read the worked answer

The 30-day failure pattern suggests an expiring client secret or a token refresh problem. In Azure AD, open the app registration used by the custom connector. Verify the client ID and client secret, confirm the secret has not expired, and rotate it before expiry. Check that the redirect URI is the Power Platform consent redirect, and confirm the API permissions have admin consent. In the custom connector security settings, verify the authentication type is OAuth 2.0 with Azure Active Directory as the identity provider. Check the authorization, token, and refresh URLs use the correct tenant, and confirm the scope matches the API. Also verify the host and base URL, and review any policy that sets headers or routes requests. If the connector uses a service principal, confirm the principal is enabled and has the required app role. Check Power Platform data policies to make sure the connector is not blocked. Finally, run the connector test operation and monitor sign-in logs in Azure AD for failed token requests.

3. How would you make the canvas Power App work offline with Field Service data, and what are the limitations?

Read the worked answer

Canvas apps can cache data locally with SaveData and LoadData, but they do not automatically synchronize with Dataverse. For Field Service field work, the safer option is the Field Service mobile app, which is a model-driven app and supports mobile offline profiles. If the canvas app must remain, design it to load reference data on start, save technician notes locally while offline, detect connection state, and push queued notes to Dataverse through Power Automate or the Dataverse connector when connectivity returns. Add conflict handling so a note is not overwritten if the work order changed on the server. Limitations include no background sync, no automatic conflict resolution, limited local storage, and no support for large data sets. Also verify that any custom entity such as Equipment Inspection is included in the mobile offline profile if technicians need it in the Field Service mobile app. Test in airplane mode with a real device before rollout.

4. How would you restrict access to the custom entity Equipment Inspection to a specific team while allowing technicians to create records?

Read the worked answer

Use Dataverse security roles and team ownership rather than relying only on app design. Create a custom security role that grants create, read, and write on Equipment Inspection but not delete unless required. Assign the role to the specific team, and set the team as the owner of the records through team-owned records or access teams. If technicians outside the team must create records but not read everyone else's, grant create and read on their own records through the role's record-level privileges. Use field security profiles for sensitive fields such as inspection results or photos if needed. Add the custom entity to the Field Service mobile app only for the intended app module, and verify the app's security roles do not grant broader access. Test with a technician account and a non-team account to confirm they can create but cannot browse other team records. Enable auditing on the entity so access and changes can be reviewed.