They run both client‑side and server‑side. But it also depends on the scope of the business rule.
- Entity (table) scope: Runs client-side and server-side, so the rule can also apply when data comes through APIs, imports, or integrations.
- All Forms: Runs client-side only on model-driven app forms.
- Specific Form: Runs client-side only on the selected form.
Example: If a rule must be enforced regardless of whether data comes from a form, Power Automate, or an API, use Entity (table) scope.
| Scope | Client-side | Server-side |
| Entity (table) | ✅ | ✅ |
| All Forms | ✅ | ❌ |
| Specific Form | ✅ | ❌ |
Interview tip: Don’t assume a rule tested successfully on a form is enforced everywhere. Entity scope is the option that also provides server-side execution.
