Limit all company users to only use (not create) powerapps

(0) Share

Report

Posted on by k_romych

Hi All

I am just looking for some clarification here. We need to have all users in a company to be able to open Powerapps and only few people to be able to create apps. So I am planning to create a new Environment in Power Platform admin center and add apps creator to Environment maker role. Then I will remove all the users from "Environment Maker" role in Default Environment (so all the apps will be created in a newly created Environment).

I also noticed "Common Data Service User" role in Default Environment has all the users - do I need to remove all the users from there?

Thanks

Categories:

Management

Environment

All responses (1)

Answers (1)

Verified answer

v-xiaochen-msft on at

Like (0)

Report

Re: Limit all company users to only use (not create) powerapps

Hi @k_romych ,

According to your description, let me explain your questions.

Firstly, If you want few people to be able to create apps, You can give them the ‘Environment maker role’.
Then for other users, I suggest you can assign ‘Minimum privileges for common task’ to them.
Please refer to the following URL for how to assign minimum permissions.
https://docs.microsoft.com/en-us/power-platform/admin/create-edit-security-role#create-a-security-role-by-copy-role

1\ Download Dataverse minimum privilege security role.

2\ Import it into your new environment’s solution.

3\ Assign roles to users who can only run apps.( https://admin.powerplatform.microsoft.com/environments)
Choose your environment—Settings—Security roles—min priv apps use—Add people

In addition, You can add other permissions to this role as needed.
1\ Choose your environment—Settings—Security roles—min priv apps use—Edit—Save
The highlighted part in the picture is the operation authority of the app.

Secondly, If you don't want users to have this permission("Common Data Service User") in the default environment.
Unfortunately, this does not restrict users from creating apps in the default environment.

Best Regards,
Wearsky