Model Driven App - How Do I restrict views

(0) Share

Report

Posted on by NPrice99

1,302

I have a number of sites.

I have a number Responsible Users.

A Responsible User can be responsible for one or more sites.

I will be responsible for creating sites, so I will be the Site Record Owner.

How do I restrict what a Responsible User sees (via a View) to the sites that they are responsible for. ?

Thanks

Nigel

Categories:

Building Power Apps

I have the same question (0)

All responses (3)

Answers (1)

Sort by

sudipm Microsoft Employee on at

Like
a
(0)

Report
Copy link

Link copied!

The easiest and most secure way to do this will be via Security Roles
Create 2 security roles
1. Site Power User
2. Site User

Give "Site Power User" security role full read permission (full green) on the Site table
Give "Site User" security role read permission on only records owned by them (quarter yellow pie)

Give yourself the "Site Power User" role.
Give your responsible users the "Site User" role

Ensure your responsible users dont have "Sys Admin" or any other role which gives them higher privelege on the read of this site table.

Set the site's responsible user as the owner of the site.

Now they will only see their sites, irrespective of what view they have selected.
You or any other user with the "Site Power User" will be able to see all sites, irrespective of the owner.

Was this reply helpful? Yes No
NPrice99 1,302 on at

Like
a
(0)

Report
Copy link

Link copied!

Thanks @sudipm for coming back so quickly.
What happens if I have two responsible users looking after one site (say because its a big site and they split the work between the two of them).

Regards

Nigel

Was this reply helpful? Yes No
Verified answer

sudipm Microsoft Employee on at

Like
a
(0)

Report
Copy link

Link copied!

If you need multiple people to own the site, the owner record supports team.

You could create a team say "owners of X site" with all responsible members added to that team, provide a read only role to the team, and make this team the owner of the site.

If you want to dynamically do this, there are access teams also in dynamics, though it has some differences compared to owner teams.
You can read more details about them here
https://learn.microsoft.com/en-us/dynamics365/customerengagement/on-premises/developer/use-access-teams-owner-teams-collaborate-share-information?view=op-9-1

Was this reply helpful? Yes No