Security Roles and Access to Microsoft Dataverse

(1) Share

Report

Posted on by NS-10041416-0

184

Hi,

I have developed a power app to save the user data into the Microsoft Dataverse Tables

Now, just want to know the roles that to be define for the testers and users.

I mean what are the best practises to define role for Microsoft Dataverse so that users,testers cannot delete/edit the dataverse table data

Only want admin group should have full access to the Microsoft Dataverse table

Regards,

Sudheer

Categories:

Microsoft Dataverse with Power Apps

I have the same question (0)

All responses (4)

Answers (1)

Suggested answer

Gabriel G. 831 Super User 2025 Season 2 on at

Like (0)

Report

Hi there,

Best case you can use is to create a new role based on 'Basic Users'. Then, you remove/modify Edit privilege on your needs. Another point is, if you create bunch of custom tables, you need to edit privileges on those tables anyway.

Final story is, you can use 'Basic Users' security role to customized a brand new role based on your needs!

I hope it helps!

___________________________________________________________________

Please click Does this answer your question if my post helped you solve your issue. This will help others find it more readily. It also closes the item. If the content was useful in other ways, please consider giving it a Like.

Was this reply helpful? Yes No
stampcoin 5,058 Super User 2025 Season 2 on at

Like (0)

Report

@NS-10041416-0 Hi,

it's a big/giant topic.

share a link:

https://learn.microsoft.com/en-us/shows/dynamics-365-fasttrack-architecture-insights/best-practices-power-platform-and-dataverse-security

Share my thought ( better to work with a security engineer/expert/consultant).

1. Figure out each role , for example define the CRUD scope on the business tables.

2. Use default role, copy it and tailor the access accordingly.

3. Combine Environments, for example test user have access to write data in sandbox, but may not have access to PROD.

4. Use principle of least privilege, start from None-Read....

5. Test the definition.

6. Remember document the definition since it's will be very complicated when business increase and other applications involve ( Finance and Operation, Dynamice 365, etc), Consultant, vendors, etc.

Was this reply helpful? Yes No
Verified answer

Ram Prakash Duraisamy 5,593 Super User 2025 Season 2 on at

Like (0)

Report
Hi @NS-10041416-0

You can follow below steps to create a new role and assign to the same to users and try the same

Go to Power Platform Admin Center > Environments > Select your environment.

Click on Settings > Users + permissions > Security roles.

Either create a new role or copy an existing one.

In the role, under Core Records, set the desired permissions on your Dataverse tables.

Save and assign this role to your testers/users.

Please mark as answer if my suggestion helps.
Subscribe here for More Useful videos : https://www.youtube.com/@rampprakash3991

Was this reply helpful? Yes No
Suggested answer

ankit_singhal 590 Super User 2025 Season 2 on at

Like (0)

Report

You need to create new role for your tester and users. In that role you can only give access for read the records then assign that role to your tester and users. they will be only able to read the data not delete or edit.

Please check the below link for more information about security roles.

https://learn.microsoft.com/en-us/power-platform/admin/security-roles-privileges?tabs=new

Note: Please mark verified, if it is useful for you

Was this reply helpful? Yes No