Help with understanding dataverse security access

(0) Share

Report

Posted on by Community Power Pla... Microsoft Employee

I'm pretty new to the Power Apps / Power Platform scene.

I have two environments, A and B.

I have created an app in environment B which takes inputs and writes data back to Dataverse tables.

If I then share this app with a user who only has access to environment A, when they log in through the Power Apps phone application, can see and search the data in the app. Is this correct? Should they be able to see the data? How does the security work in this case?

Many thanks in advance

Categories:

Microsoft Dataverse with Power Apps

I have the same question (0)

All responses (6)

Answers (1)

Sort by

Drew Poggemann 9,287 Most Valuable Professional on at

Like
a
(1)

Report
Copy link

Link copied!

Hi @Anonymous ,

Can you clarify "see and search the data"? The key item controlling access to the data in the Dataverse is the roles assigned to the user. When you shared the application with the user you were asked to select a role to assign and this role controls the data access.

Please check out the following article that explains the role based security: https://docs.microsoft.com/en-us/power-platform/admin/wp-security-cds

Hope this helps. Please accept if answers your question or Like if helps in any way.

Thanks,

Drew

Was this reply helpful? Yes No
Community Power Pla... Microsoft Employee on at

Like
a
(0)

Report
Copy link

Link copied!

Hi @dpoggemann

There is a gallery as part of the app that displays items from the accounts table that the user can see and search through. The user, who cannot see the environment the app is built in, can see the data in the gallery when the app is shared with them.
So the security selected at the time of sharing would control that?

Was this reply helpful? Yes No
Drew Poggemann 9,287 Most Valuable Professional on at

Like
a
(1)

Report
Copy link

Link copied!

hi @Anonymous ,

Yes, if the Gallery is pulling records from the Accounts table and you have the role for the user setup where they can view any Accounts, not just ones assigned to "them" then all the records queried in the gallery will display for the user. If you setup the Account Entity in the Role so they can only view their own records (User level) for the role the user is assigned then they would only see the records where they are the owner.

Thanks much!

Drew

Was this reply helpful? Yes No
Community Power Pla... Microsoft Employee on at

Like
a
(0)

Report
Copy link

Link copied!

Hi @dpoggemann

Thanks for the reply. That does make sense. Does that apply across environments? I think that's the bit I'm struggling to get my head around. The app and the user are in two different environments. Do privileges and security roles apply across environments?

Was this reply helpful? Yes No
Verified answer

Drew Poggemann 9,287 Most Valuable Professional on at

Like
a
(1)

Report
Copy link

Link copied!

Hi @Anonymous ,

No they do not. You need to share / assign specifically to each environment. I would go look at the user in that environment and see the role assigned. You can see the users under the admin.powerplatform.com and going into Settings to access the users. You can then look at the user and the roles assigned. Another situation could exist where you assign the user to a security group that is setup as a team in Dataverse with roles assigned. I assume this is not the situation though but this is actually best practice (see: https://docs.microsoft.com/en-us/power-platform/admin/database-security#create-or-configure-a-custom-security-role)

Thanks,

Drew

Was this reply helpful? Yes No
Community Power Pla... Microsoft Employee on at

Like
a
(0)

Report
Copy link

Link copied!

Hi @dpoggemann
That is great, thanks for your help on this 😊

Was this reply helpful? Yes No