web
You’re offline. This is a read only version of the page.
close
Skip to main content

Announcements

News and Announcements icon
Community site session details

Community site session details

Session Id :
Copilot Studio
Unanswered

CORS Policies & PVAs

(1) ShareShare
ReportReport
Posted on by 4

I have a PVA that has been published on a couple of sites owned by a client.  These sites use completely different domains from each other.

 

In testing accessing the PVA from at least one of the sites,  the user is encountering an error where the PVA has been blocked by CORS policy: No Access-Control-Allow-Origin header being present on the requested resource.

 

I am not aware that any CORS policies exceptions or changed need to be set on the PVA to allow it to be accessed from custom web apps.  Can anyone please confirm?

 

Note, I do not have visibility of any specific browser security settings being used when this testing is being done.

Categories:
I have the same question (0)
  • Noodles2302 Profile Picture
    4 on at

    I guess the question that I am really asking is that, do we have to explicitly set CORS policies on the Power Platform for PVAs to be used, because I would expect that in most cases the PVA is being called from a web application that is in another domain?

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Season of Sharing Community Challenge Launch!

Jump in, show your community spirit, and win prizes!

Kudos to our 2025 Community Spotlight Honorees

Expanding mentorship, skilling, and AI innovation

Congratulations to the May Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > Copilot Studio

#1
Valantis Profile Picture

Valantis 309

#2
11manish Profile Picture

11manish 187

#3
chiaraalina Profile Picture

chiaraalina 101 Super User 2026 Season 1

Last 30 days Overall leaderboard