1. Microsoft Learn
Power Platform Documentation. "Security roles and privileges". This document explains that a user's total permissions are a combination of all assigned roles. It states
"The total set of privileges for a user is the union of all privileges granted by all the security roles assigned to that user." This supports the methodology of testing a new role in conjunction with a base role.
Reference: Microsoft Learn
"Security roles and privileges
" Section: "How security roles are used."
2. Microsoft Learn
Power Platform Documentation. "Configure user security in an environment". This guide details the process of assigning roles and emphasizes creating a security model that reflects the organization's structure. Testing this model requires simulating a user's actual role combination
not just testing a new role in isolation or with administrative privileges.
Reference: Microsoft Learn
"Configure user security in an environment
" Section: "Assign a security role to a user."