Power Platform Community Forum Thread Details

Let's consider the following scenario:

I have a user role called ROLE_A limiting rights to "(a) These users can read only rows from the Accounts table which belong to their own branch, but they cannot manipulate it. (b) These users can read only a subset of columns the Accounts table.".

I also build a model-driven app for managing the Accounts table, with full authorization, let's call it ROLE_A_Extended. This model-driven app will have the full rights on this table.

I will give the users of ROLE_A access to this model-driven app.

Could you please help me understand the following:

1. Are the ROLE_A users getting more rights because they have access to an app with ROLE_A_Extended? Or, the user role ROLE_A is still enforced even though the application has ROLE_A_Extended?
2. If they are actually getting more rights, how I can enforce these users to keep only to their rights in ROLE_A (instead of getting ROLE_A_Extended)? Do I need to program/code every artifact in the app (data source connections, what is displayed in the tables in app, the button visibilities in app, etc.) to enforce such rights?

We can generalize this question not only to model-driven apps but other kind of apps also in the Power Platform.

Thank you.

Categories:

General topics