Dataverse for Teams security

(1) Share

Report

Posted on by MagnusGöransson

424

Hey!

I have been creating PowerApps using both SharePoint lists and CDS as a backend. Well, SQL also of course, in the past.

However, Dataverse for Teams looks really promising but I can't get figura out how security works in this new database.

Lets say I have a PP Environment for Teams, a couple of tables and a PowerApp created in Teams.

In SharePoint its easy to set permissions so that each user can create items, update them and delete them while they are unable to even read other peoples items.

How can that be achieved by using Dataverse for Teams?

Best Regards, Magnus Göransson

Categories:

Microsoft Dataverse with Power Apps

I have the same question (0)

All responses (8)

Answers (1)

EricRegnier 8,720 Most Valuable Professional on at

Like (2)

Report

Hi @MagnusGöransson,

The quick answer is security roles and privileges for Dataverse for Teams are not configurable like in standard Dataverse. The roles and related privileges are automatically set and assigned based on the O365 group / Teams group members. To edit those (add/remove users) you'll have to update directly in O365 and will reflect in Teams.

See the role assignment section to determine which role is assigned to users based on their user type and membership in O365.

More info: https://docs.microsoft.com/en-us/power-platform/admin/about-teams-environment#conceptual-model

Hope this helps...

Was this reply helpful? Yes No
MagnusGöransson 424 on at

Like (0)

Report

Hey Eric, sorry for late response here.
This is really something that i hope would change in the future. The permissions model for a simple SharePoint list has actually alot functionality as I can control access even on a record level.
For applications other than a very simple list app Dataverse for Teams is basically useless as the simple apps can use SharePoint lists anyway. 😕
/Magnus

Was this reply helpful? Yes No
EricRegnier 8,720 Most Valuable Professional on at

Like (3)

Report

Hi @MagnusGöransson, yes security is limited in Dataverse for Teams, which I hope Microsoft will eventually enhance, however it does have a lot of advantages as opposed to SharePoint list, main one is relational data model. Maybe standard Dataverse would be more applicable for you to get the whole suite?
Cheers

Was this reply helpful? Yes No
MagnusGöransson 424 on at

Like (0)

Report

Yes, and I am using full Dataverse a lot, but usually not for apps with a large user base because of licensing. I was hoping for Dataverse for Teams for the rest of the apps. Dataverse is much more robust compared to SP Lists, but SP Lists still adds important functionality when it comes to permissions.
I really hope at least some basic functionality will be added.
One option that would solve most of it would be functionality to lock down access to DVfT only from specified PowerApps or Flows. And also the ability to only allow edit access to apps to Team Owners.
As it is now, any member can open the Powerapps Studio in Teams and browse all tables in DV.
/Magnus

Was this reply helpful? Yes No
Verified answer

EricRegnier 8,720 Most Valuable Professional on at

Like (1)

Report

I haven’t given it a try yet, but have a look at DLP for Teams: https://docs.microsoft.com/en-us/microsoftteams/teams-app-permission-policies maybe you can control access to the studio...

Was this reply helpful? Yes No
MagnusGöransson 424 on at

Like (0)

Report

Yes, I will look into it!
In the mean time, go vote here: https://powerusers.microsoft.com/t5/Power-Apps-Ideas/Security-in-Dataverse-for-Teams/idi-p/775459#M32624 🙂

Was this reply helpful? Yes No
MagnusGöransson 424 on at

Like (2)

Report

This has been implemented now! I am so happy 🙂

Was this reply helpful? Yes No
EricRegnier 8,720 Most Valuable Professional on at

Like (1)

Report

Yes I saw!!

Was this reply helpful? Yes No