Edit - what seems to have worked is created a table permission with account access type. Then associating it with a web role. Give that web role to authenticated users, and then when they look into a view of all contacts, as a test case, they only see those contacts on their account.
I've reviewed documentation and am a little confused as to what's the preferred method for doing something like adding a read permission on a table or set of tables that does something like grants read permission if the logged in user's company matches the company that the current record is related to. In ServiceNow we had scripted ACL's, where you can just write javascript to run a query and determine based on if current_user.company = current_record.company if the ACL evaluates to true or false. Something like that.
Is there a way to do this in power pages backed by dataverse w/out going into a code first approach and getting into javascript/liquid? Using site roles and possibly some scripting in an advanced role configuration view?
I should also add that the desire is to allow external users show up in the contacts table, looks like a lot of the security roles is based on Team Groups, which is AAD based. So unsure how to configure things if users aren't in AAD but are just the external user type that populate the contact table in the site's dataverse schema.
Thanks.
