Skip to main content

Notifications

Community site session details

Community site session details

Session Id :
Power Apps - Microsoft Dataverse
Unanswered

Add attachment without edit permissions

(0) ShareShare
ReportReport
Posted on by 202

Hi community,

I have the requirement that a specific security role should only be able to create and read their own entries on a table but not edit/update. Therefore  I specified the security role like:

carl1to_0-1664892063831.png

 

But now, these users are not able to upload files in the creation of a new row (this is done through a custom page / canvas app).

The record gets created but the attachment column stays empty even though the user added an attachment. If the "edit" permissions are granted, this works perfectly fine...


Is there a possibility to allow to upload attachments through the creation process without edit permissions?

As an alternative: is it possible to revoke edit permissions through a cloud flow?

Categories:
  • Mira Ghaly Profile Picture
    11,409 Super User 2025 Season 1 on at
    Re: Add attachment without edit permissions

    @carl1to 

    Yes I totally agree with the solution you came up with it will work on your case.

     

  • carl1to Profile Picture
    202 on at
    Re: Add attachment without edit permissions

    Hi @AhmedSalih,

    hi @Mira_Ghaly 

     

    Thank you for your advices. 

    The attachment column is in a dataverse table for which attachment is enabled.

     

    Assignment of security roles by PowerAutomate is quite interesting. But this is not a solution for this problem, since the users should only be restricted to read on their "old" records but should have write permissions on every new one...

     

    The use of a separate cloud flow in the context of a service-user (admin) would probably work. But I think this is a bit messy.

     

    An alternative I have found yesterday is the use of security roles for forms: Control access to model-driven app forms in Power Apps - Power Apps | Microsoft Learn

    By assigning the standard form to a security role and create a separate form with all fields "read-only" I can prevent the second restricted group to alter information in the form even though they have write permissions.

    I think think this could work out for this setting. The only drawback is, that they still can alter information of that table that is displayed in the Business Process Flow above the form.

     

     

  • Mira Ghaly Profile Picture
    11,409 Super User 2025 Season 1 on at
    Re: Add attachment without edit permissions

    @carl1to 

    Are you using the File control right and not the SharePoint attachments is that correct?

    The direction I am thinking of is to try to change the context of the user like run the update part in the context of an Admin.

     

     

  • AhmedSalih Profile Picture
    6,678 Super User 2025 Season 1 on at
    Re: Add attachment without edit permissions

    Also, @carl1to, if you will have to use the Power Automate to assign a security role, This Video might help. 

    Notice that, in your scenario, you will have to have two Security Roles one with the Edit Permission and one without so you can switch between the do as needed.

     

     

     

     

    If my reply helped you, please give a 👍 , & if it solved your issue, please 👍 & Accept it as the Solution to help other community members find it more.


    I am primarily available on weekdays from 6-10 PM CT and 5-10 PM CT on weekends.


    Visit my Blog: www.powerplatformplace.com


     

     

     

     

  • AhmedSalih Profile Picture
    6,678 Super User 2025 Season 1 on at
    Re: Add attachment without edit permissions

    Hello, @carl1to, First, let me ask you this: have you enabled the Attachement option for the Table?

    v-xiaochen-msft_0-1606966310776.jpeg

     

     

     

    If my reply helped you, please give a 👍 , & if it solved your issue, please 👍 & Accept it as the Solution to help other community members find it more.


    I am primarily available on weekdays from 6-10 PM CT and 5-10 PM CT on weekends.


    Visit my Blog: www.powerplatformplace.com


     

     

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

🌸 Community Spring Festival 2025 Challenge Winners! 🌸

Congratulations to all our community participants!

Warren Belz – Community Spotlight

We are honored to recognize Warren Belz as our May 2025 Community…

Congratulations to the April Top 10 Community Stars!

Thanks for all your good work in the Community!

Leaderboard > Power Apps - Microsoft Dataverse

#1
stampcoin Profile Picture

stampcoin 17

#2
mmbr1606 Profile Picture

mmbr1606 13 Super User 2025 Season 1

#3
ankit_singhal Profile Picture

ankit_singhal 11 Super User 2025 Season 1

Overall leaderboard

Featured topics