Unanswered

Gouvernance acces to SharePoint List

(0) Share

Report

Posted on by CedricG19

Hi,

I've devellop a small apps that use SharePoint List to store data. Now, I want to push it in production and give access to end users.

I've set up the connections to SharePoint List with a specific user (Xuser) that can access to List (read/write). I've do the same with the powerflow uses in my app (setup proxy with my specific user (Xuser) and then publish my app to end users.

It looks my specific user is not used because I have to grant access to end user yo get data in the app. For sure I can't do that because I don't want end users see all lines/data.

Is there a specific way to do that ?

Tks

Categories:

Governance & administering

I have the same question (0)

All responses (8)

Answers (0)

Sort by

Pstork1 69,490 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Power apps does not provide for security impersonation. All teh connections will run in the security context of the user running the app. So yes, you need to grant all the user's access to the data. There is no other way. If you want to limit which items a user can see you need to implement item level security on the SharePoint data itself. This video discusses how to do item level permissions. PowerApps SharePoint Item Level Permissions via Power Automate - YouTube

Was this reply helpful? Yes No
CedricG19 6 on at

Like (0)

Report
Copy link

Link copied!

Thanks for your feedback.
Is it the same rules if I store data in dataverse tables ?

Was this reply helpful? Yes No
Pstork1 69,490 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Same in the sense that the user needs whatever access they must have to work with the data in the program. But Dataverse has more granular security roles than SharePoint so its a little easier. But basically the same story. Power Apps isn't designed to be a security layer.

Was this reply helpful? Yes No
CedricG19 6 on at

Like (0)

Report
Copy link

Link copied!

Thanks. And concerning powerflow, I've setup my proxy flow with my specific user (Xuser).
It looks like I should share my flow to end users to grant access PowerApps to flow ? Nevertheless the proxy is use or it's the end user account ?

Was this reply helpful? Yes No
Pstork1 69,490 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

If the flow is triggered by Power Apps then the user running Power Apps will be used. If the flow is triggered automatically then the account you configured in the connection will be used.

Was this reply helpful? Yes No
CedricG19 6 on at

Like (0)

Report
Copy link

Link copied!

So proxy account is not used because the flow is launched by the app...so by the user.
Stupidly, I used the same development logic that I have on traditional applications. In my mind, I was using powerflows as SQL stored procedures with an impersonal connection.

Was this reply helpful? Yes No
Pstork1 69,490 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

The SQL connector does have an embedded user account for connecting to SQL. But for the flow's connection (OAuth) to the connector it is using the ID of the user who starts the flow.

Was this reply helpful? Yes No
Devikumari Krishna 988 Super User 2024 Season 1 on at

Like (0)

Report
Copy link

Link copied!

Hi @CedricG19 ,

The simplest way is to maintain owner field in SharePoint List.
When you trigger the flow from App, pass the owner to flow. You retrieve the records and bind them to Data verse only where the owner matches between App and SharePoint List.

Hope this helps.
Please accept my solution in case it helps and give kudos.

My Blog : https://d365topicsbydk.com
My Youtube Channel : https://www.youtube.com/channel/UCxSIryP2ah2VpEFr-Z72t1A

Regards
Devi

Was this reply helpful? Yes No