Power Platform Community Forum Thread Details

Hi everyone,

I have shared a canvas app with a colleague via Teams. The target user is already in the security group but hasn't installed the app on their MS Teams yet. I am trying to create a record in custom Teams' Dataverse table and assign ownership of the record to the target user from Power Automate using systemusers(), regardless of whether the user has launched the app or not.

Initially, I couldn't find the user in the environment Users table, so I added the target user to the user table using 'Force Sync user' in Power Automate.

Now, the flow can find the target user from the Users table, but it shows a read privilege check failure for the target user because they haven't been assigned any roles. Interestingly, the issue resolves automatically once the user installs the app on their Teams.

The table permission is set correctly, and the user can interact with the table normally once they launch the app. However, the flow can't assign record ownership to the user before they launch the app.

Here is the error message:

"Read Privilege Check For Owner failed with exception: RetrievePrivilegeForUser: The user with id {target user ID} has not been assigned any roles. They need a role with the prvReaddpa99999_Teachingspace privilege."

Does anyone have any idea how to resolve this without forcing the user to launch the app first?

Thanks in advance!

Additionally, I discovered some interesting findings while investigating this issue. The user’s caltype is set to ‘Professional’ when added using ‘Force Sync User’ and changes to ‘Enterprise’ once the user installs the app from the Teams marketplace. (see image attached)