Demystifying what is an under-discussed, yet essential, part of any D365 or Power Apps implementation, this session will review the core components of Dataverse security frameworks and discuss common mistakes and misunderstandings. The session will be framed by a realistic client scenario, whereby a project's requirements require us to build and increment an App and its corresponding security framework. As we review each new requirement the security framework will become more elaborate, introducing new core concepts (business units, AAD Teams, security roles, CLS, etc) that will be explained and contextualized in the framework we "build together" in the session. The outcome of this session will be a feature-rich security framework that addresses many of the scenarios presented by our D365 and Power Platform projects.