Dynamic Row Level security for a Dataverse Table

Like (0) Share

Report

Posted on 13 Mar 2022 03:59:30 by ezFlow

100

Scenario:
- Internal staff will created Purchase Order Records in a Dataverse table, with a field to capture the Vendor and other details.
- Vendors are setup as AD guest (external) users and will login via a Model Driven App, to see their item.
How can I secure the rows so the Vendors can only see their own related records.

Categories:

Microsoft Dataverse

Entities

Tables

All responses (3)

Answers (2)

Verified answer

Drew Poggemann 9,278 Most Valuable Professional on 14 Mar 2022 at 09:35:33

Like (1)

Report

Re: Dynamic Row Level security for a Dataverse Table

Hi @ezFlow,

Just a note that Access teams allow the ownership of the Purchase Orders to stay with an internal team / owner and the Access team allows you to assign the Vendor to the record with specific rights (without being the owner of the record).
ezFlow 100 on 14 Mar 2022 at 01:04:29

Like (0)

Report

Re: Dynamic Row Level security for a Dataverse Table

Thank you for validating my thoughts. I was thinking of creating the Vendor table and have a flow assign ownership.
Verified answer

Drew Poggemann 9,278 Most Valuable Professional on 13 Mar 2022 at 10:00:50

Like (1)

Report

Re: Dynamic Row Level security for a Dataverse Table

Hi @ezFlow

The primary approach I would utilize to accomplish this would be to utilize an Access Team that you can assign the vendor when they are setup in the lookup field on the record. You can utilize a real time workflow to add the vendor to the access team dynamically.

https://docs.microsoft.com/en-us/powerapps/developer/data-platform/use-access-teams-owner-teams-collaborate-share-information

https://www.azamba.com/2018/02/15/how-to-enable-access-teams-in-microsoft-dynamics-365-for-sales-crm-share-records/