A company is creating a Microsoft Power Platform app to enable employees to log daily...

A company is creating a Microsoft Power Platform app to enable employees to log daily time entries. Employee user accounts are in multiple Azure AD tenants and are not located in the tenant that is running the app.

Employees must be added as Azure AD guest accounts within the tenant that will be running the app. Employees must access the model-driven app by being a member of a security team. The security team has been assigned the Employee Security role. Employees must create personal views of records to view within the system.

You need to implement a security solution.

Which privilege should you use?