Unanswered

Security role to import solution but not access Admin Center?

(0) Share

Report

Posted on by kranis

174

As I understand, to import a Solution, the user needs to have System admin or System customizer role. Is there any way to give these roles but without giving access to Admin Center? Because then the user have access to every environment.

Categories:

Governance & administering

I have the same question (0)

All responses (4)

Answers (0)

Sort by

AlbertoCastro 1,201 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Hi,
that is not correct. All users can access to PPAC, no matters the security role that the user has. Simply the actions that the user could be to do in this portal are restricted with the role assigned.

In your case, related with the role neccesary to import solutions. You could use alternatives like the account to import solutions is managed by an admin or deployer team. Or use ALM integrated with GitHub actions or Power Platform Pipelines, where these accounts are impersoned.
At the moment that a persona have to import a solution manually, there is the "risk" that this persona has a system admin rol and could manage the environment.
In this situation, a good training to this people is very import by trust and delegate this task.
-------------------------------------------------------------------------
If I have answered your question, please mark your post as Solved.
If you like my response, please give it a Thumbs Up.
Regards
Alberto

Was this reply helpful? Yes No
kranis 174 on at

Like (0)

Report
Copy link

Link copied!

OK thanks for your answer @AlbertoCastro
Pipelines is not applicable in this scenario as this is a one time solution I need to import from a 3rd party.

Problem is if I make the person System Customizer, it will get that role in ALL the environments in that tenant, correct? I wished it was a way to only give these rights to ONE particular environment

Was this reply helpful? Yes No
AlbertoCastro 1,201 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Oh no, the security roles only applies to the environment where the role created!!
I think you are getting confused with the Azure role: power platform administrator which does make the user administrator of all environments in the tenant.

Was this reply helpful? Yes No
kranis 174 on at

Like (0)

Report
Copy link

Link copied!

OK that good news!
I did a test. And when I assign that user the System Customizer role in one environment. But I see that same security role is reflected into the Default Environment?

Another thing. When this user is assign System Customizer, as you mention he will have access to Power Platform Admin center. But as I understand you, he wont even be able to see the other environments over there? Otherwise he could assign a security role to himself in other environments too.

Thanks!!

A

Was this reply helpful? Yes No