Answered

Can someone who is shared my connector use it in their app?

(0) Share

Report

Posted on by BenDonahue

932

If I share a connector with someone that gives them the access I allow then via the app I create, can that person then use that same connector to my data (SQL, OneDrive, SharePoint, etc.) to create an app that will then have all the functionality they put into the app? In other words, in the default environment where everyone is a maker, can someone use a connector I share with them in order to use an app I create to then create an app with all the functionality they want and, perhaps, delete my whole data set?

Categories:

Building Power Apps

I have the same question (0)

All responses (4)

Answers (2)

Verified answer

timl 36,415 Super User 2025 Season 2 on at

Like (1)

Report

Hi @BenDonahue

With the SQL connector, a connection that we create using SQL authentication or Windows Integrated Authentication will be based on an implicit/shared connection (the designer will indicate this is the case).

In this scenario, if you were to share the connector, the user would be able to create a new app based on that connection, and could potentially delete your whole data set. The ability to delete your whole data set would depend on permissions that are associated with the credentials that you used to create your shared/implicit connection.

With OneDrive, you would need to grant permissions in OneDrive to the users that require access to the data source. Therefore, a user could directly edit the Excel spreadsheet for an app, and potentially delete records.

A SharePoint connection will be based on AAD authentication. Therefore, the user will have no more access to data above the permissions that you have defined for the user in the SharePoint list.

Hope that's of some use.

Was this reply helpful? Yes No
Verified answer

BenDonahue 932 on at

Like (0)

Report

It really is, thank you.
It is my understanding (please correct me if I don't quite have it):
- a shared OneDrive connector will allow makers to have full access to my OneDrive, outside of the functionality I include in the app
- a shared SQL connector will allow makers to have full access to my SQL DB outside of the functionality I include in the app
- a shared SharePoint connector will not allow makers to access my SharePoint lists (This access is defined by the list itself) outside of the functionality I include in the app
- a shared Excel connector will not allow makers to access my Excel file outside of the functionality I include in the app, except where that file may reside in a OneDrive, in which case the connector will give full rights to anyone it is shared with as if they were me.
Thank you again for your assistance, @timl.

Was this reply helpful? Yes No
timl 36,415 Super User 2025 Season 2 on at

Like (1)

Report

Hi @BenDonahue

Just to clarify the final point, because we store Excel files in OneDrive/Google Drive/ or some other cloud location, a user will be able to access your Excel file outside of the functionality that you include your app.

Your understanding of the other points is perfectly correct 🙂

Was this reply helpful? Yes No
BenDonahue 932 on at

Like (1)

Report

Very much obliged, @timl. 🙂

Was this reply helpful? Yes No