Explanation:
Box 1: System Customizer
System Customizer - Has full permission to customize the environment. However, users with this role can only view records for environment entities that they create.
Box 2: Assign the Basic User role
Can run an app within the environment and perform common tasks for the records that they own.
Note: A user's ability to see and use apps is controlled by sharing the application with the user.
Sharing of canvas apps is done directly with a user or Azure AD group but is still subject to Dataverse security roles. Sharing of model-driven apps is done via Dataverse security roles.
Box 3: Add users to an Azure AD Security Group
Sharing of canvas apps is done directly with a user or Azure AD group but is still subject to Dataverse security roles.
Incorrect:
* Office Collaborator role
Has Read permission to tables where a record from these tables was shared with the organization. Does not have access to any other core and custom table records. This role is assigned to the Office Collaborators owner team and not to an individual user.
Reference:
https://docs.microsoft.com/en-us/power-apps/maker/data-platform/environmentvariables
https://docs.microsoft.com/en-us/power-platform/admin/wp-security
https://docs.microsoft.com/en-us/power-platform/admin/database-security