13. Do business rules run client-side, server-side or both — and why does that matter?

They run both client‑side and server‑side. But it also depends on the scope of the business rule.

• Entity (table) scope: Runs client-side and server-side, so the rule can also apply when data comes through APIs, imports, or integrations.
• All Forms: Runs client-side only on model-driven app forms.
• Specific Form: Runs client-side only on the selected form.

Example: If a rule must be enforced regardless of whether data comes from a form, Power Automate, or an API, use Entity (table) scope.

Interview tip: Don’t assume a rule tested successfully on a form is enforced everywhere. Entity scope is the option that also provides server-side execution.