Unanswered

Sharing Sql Server Connection Authenticated by User Principal

(0) Share

Report

Posted on by ebaini

Hello,

I was able to successfully create a SQL Server Connection using Service principal (Azure AD application) and I would like to share it with all users of my app to avoid them entering the Tenant, Client ID and Client Secrets attributes.

When I check sharing the system allow to share the app with Service principals names and service principals apps id only.

Do you know how I can grant users or groups to Managed Identities or User principals to allow them use the connection?

Thanks in advance.

Enrico

Categories:

Building Power Apps

I have the same question (0)

All responses (10)

Answers (0)

anmolgan81 8 on at

Like (0)

Report
Copy link

Link copied!

Can you provide some links or perhaps some example how to configure a powerapp with run only, so users are not prompted to add service principle details and app opens automatically if a user has access?

Was this reply helpful? Yes No
PremilBhat Microsoft Employee on at

Like (0)

Report
Copy link

Link copied!

Hello You cannot share the connection using SPN as authentication, But if you want to let the other team mate use this connection the you need to Configure Run Only user setting to use the SPN connection made by you

Was this reply helpful? Yes No
sivasankar12 8 on at

Like (0)

Report
Copy link

Link copied!

Power apps SQL server connector is having its own limitations. Only way you can create a connection with Sql authentication which is sharable.

Was this reply helpful? Yes No
ebaini 6 on at

Like (0)

Report
Copy link

Link copied!

In this case, what is the most secure connection between a database in the cloud and powerapps that prevents other solutions outside the ones selected to access the data, without the burden to manually manage IP addresses in the portal?

Was this reply helpful? Yes No
sivasankar12 8 on at

Like (1)

Report
Copy link

Link copied!

Yes, You can create Sql server connection in power apps using service principle and also can load the tables data but you can't share this connection with other users as it is a non sharable connection.

Was this reply helpful? Yes No
ANB 7,250 Super User 2025 Season 2 on at

Like (0)

Report
Copy link

Link copied!

Hi @ebaini , This is what I found, It is limitation:

Check this https://learn.microsoft.com/en-us/connectors/sql/#general-known-issues-and-limitations
Also check this: https://powerusers.microsoft.com/t5/Power-Apps-Pro-Dev-ISV/SQL-Server-connector-Service-principal-authentication/td-p/2049297

-----------------------------------------------------------------------------------------------------------------------------

I hope this helps.

Please click Accept as solution ✅ if my post helped you solve your issue. This will help others find it more readily. It also closes the item. If the content was useful in other ways, please consider giving it Thumbs up.👍

Thanks,
ANB

Was this reply helpful? Yes No
ebaini 6 on at

Like (0)

Report
Copy link

Link copied!

I could create an user managed identity and share the connection with that, but the users granted to that user managed identity cannot access see the connection

Was this reply helpful? Yes No
ebaini 6 on at

Like (0)

Report
Copy link

Link copied!

If I try and add a user (any user in my organization I get this error)

Was this reply helpful? Yes No
ANB 7,250 Super User 2025 Season 2 on at

Like (0)

Report
Copy link

Link copied!

Hi @ebaini , You can also search using the Object ID of User, Group that you can get from Azure AD.
-----------------------------------------------------------------------------------------------------------------------------

I hope this helps.

Please click Accept as solution ✅ if my post helped you solve your issue. This will help others find it more readily. It also closes the item. If the content was useful in other ways, please consider giving it Thumbs up.👍

Thanks,
ANB

Was this reply helpful? Yes No
ANB 7,250 Super User 2025 Season 2 on at

Like (0)

Report
Copy link

Link copied!

Hi @ebaini , You just need to add the user email address and it will auto populate for you. Then select the user or group and then give permission.
-----------------------------------------------------------------------------------------------------------------------------

I hope this helps.

Please click Accept as solution ✅ if my post helped you solve your issue. This will help others find it more readily. It also closes the item. If the content was useful in other ways, please consider giving it Thumbs up.👍

Thanks,
ANB

Was this reply helpful? Yes No