For a customer I have developed a Power App solution. In the Power App a Power Automate flow is called via MyFlow.Run(). The users in the customer tenant get the following message when the flow is triggered: "Principal with id <principal-id> does not have ReadAccess right(s) for record with id <record-id> of entity workflow." (see uploaded image)
I am confused, because in my company tenant where I developed the app I don't get such an error
AND
when I try it with another user in the customer tenant where I have access to there is no problem either. I give the user the same license and the same right to use the app and when I run the app with this user everything works fine. What could be the problem?
Furthermore, what does the "principal id" mean? I would have thought that would be the id of the user of the app where it fails. But it is not the id.
I have been having a similar error and I finally resolved it by deleting the Flow from my Power App and then adding it back. The flow would perform as expected when I initiated the task in the canvas app but when others with all the required permissions tried, they got this error message. This thread was very helpful so thank you.
FlowName.Run failed: {"error":{"code":"0x80048306","message":"Principal with id NNN does not have ReadAccess right(s) for record with id NNN of entity workflow. Details: {\"CallerPrincipal\":{\"PrincipalId\":\"NNN\",\"Type\":8\"IsUserPrincipal\":true},\"OwnerPrincipal\":{\"PrincipalId\":\"NNN\",\"Type\":8\"IsUserPrincipal\":true},\"ObjectID\":\"NNN...
I have now shared it with the group of the Sharepoint website under which the lists that I access are stored. All users of the app have to be in this group anyway so that they can access the data in the lists via the app.
Hi, @Jmanriquerios
Hmm, maybe. As I said, I'm relatively new to the Power Platform.
And assuming that it would be best to run the flow with the user who triggered the flow: Do I then have to explicitly share the flow with every user who uses the app? Because without sharing I am encoutering the error. Or is there another option?
Hi @tnickel
You are telling it to always run it with that same user, but perhaps the ideal would be to run it with the user who triggers the flow
I now created a whole new user and now I can reproduce it.
What I found out now: If I share the flow with the user, it works.
But I don't want to share the flow with everyone who uses the app. I would assume that if I set the "Connections Used" to "This connection (...)" that the flow runs in context of this connection which is established and it should work. What is my mistake here?
The Sharepoint list is in a Sharepoint Website. I have added the users as members to the group
"The connection string must be associated with the environment user" - so do you mean "Provided by run-only user"?
Hi @tnickel
Check if the user has permission in the sharepoint list that is executing the flow
The connection string must be associated with the environment user
WarrenBelz
637
Most Valuable Professional
stampcoin
570
Super User 2025 Season 2
Power Apps 1919
473