Canvas App - Access issue for External Users

(0) Share

Report

Posted on by sathahk Microsoft Employee

I created a Canvas application that supports both External and Internal Users. Parent flows are used within the app, and the child flows authenticate with SPN. I invited a guest user and added them to the Power Platform Environment with Basic User Permission. After they accepted the invitation, I granted them access to the app. However, when the guest user tries to access the app, they encounter an issue: "You don't have access to this; your sign-in was successful but you don't have permission to access this resource group."

Categories:

Building Power Apps

I have the same question (0)

All responses (4)

Answers (0)

Sort by

Suggested answer

11manish 3,333 on at

Like
a
(1)

Report
Copy link

Link copied!
The issue is most likely not with the Canvas App itself, but with permissions to one of the underlying resources used by the app or flows.

The error:

"Your sign-in was successful but you don't have permission to access this resource group"

means:

Authentication succeeded in Microsoft Entra ID

But authorization failed for a downstream resource

Since your solution uses:

Microsoft Power Apps Canvas App

Parent and Child Flows

Service Principal (SPN) authentication

External guest users

Check the following in order:

Share BOTH parent and child flows with the guest user

Verify Dataverse security roles

Validate connection references

Review SPN / App Registration permissions

Use Power Apps Monitor to identify the exact failing component

In guest-user scenarios, sharing the Canvas App alone is usually not sufficient because external users must also have access to the underlying flows, connectors, and Azure resources used by the solution.

Was this reply helpful? Yes No
Suggested answer

Vish WR 3,748 on at

Like
a
(1)

Report
Copy link

Link copied!

This looks more like a permissions or Conditional Access issue rather than a Canvas app problem itself.

Make sure the guest user has:

• Access to the Power Platform environment

• Required security roles

• Permissions to all connected resources (SharePoint, Dataverse, flows, connections)

• Access allowed through Entra ID Conditional Access policies (MFA, external user restrictions, device/location policies, etc.)

The “sign-in successful but no permission” error commonly happens when one of the underlying services is blocked for external users.

Was this reply helpful? Yes No
Suggested answer

Power Platform 1919 2,254 Super User 2026 Season 1 on at

Like
a
(1)

Report
Copy link

Link copied!

Hi @sathahk,
Please, check this ms doc about sharing canvas app with external users:
https://learn.microsoft.com/en-us/power-apps/maker/canvas-apps/share-app-guests

Also check this:
https://www.matthewdevaney.com/a-fool-proof-way-to-share-power-apps-with-external-users/

Was this reply helpful? Yes No
Vish WR 3,748 on at

Like
a
(0)

Report
Copy link

Link copied!

@sathahk

Wanted to check if you are able to resolve your problem? Let me know if you need any clarification

When replying, please don't forget to mention my userid so that it will be notified

Vishnu WR

LinkedIn - My Tech Space

Please ✅ Does this answer your question if my post helped you solve your issue. This will help others find it more readily. It also closes the item. If the content was useful in other ways, please consider answering Yes to Was this reply helpful? or give it a Like ♥

Was this reply helpful? Yes No