Hello,
I have SharePoint list that I customized in Power App. I have run in to a slight permissions issue.
Product: A list where employees can submit a leave request or the request can be submitted on behalf of the employee.
Permission Goal: I do not want all employees to be able to see all SharePoint list items. Only the following people should be able to see what is on the SharePoint list.
- The Employee
- The Requestor
- All members of 3 specific SharePoint groups.
Plan: I will filter out all items unless the user is listed in one of the 3 following fields:
- Column Type: Person or Group, allow single selection, editable, Column Name: Employee Name
- Column Type: Person or Group, allow single selection, editable, Column Name: Requestor Name
- Column Type: Person or Group, allow multiple selections, not-editable and hidden, Column Name: Controllers
Considerations:
- I have considered setting the SharePoint list advanced setting to read, create and edit items only created by user but that causes an issue since I need supervisors or be able to submit the request on behalf of the employee also.
- I have considered using a Microsoft Flow that starts when a new item is created. It would stop sharing an item or file as shown by Vikram_Samal's post filting/restricting list items on the basis of user group in sharepoint online classic - Microsoft Tech Community Not sure if that would accomplish the goal.
Question and Problem: Trying to set the value in the Controllers column to multiple SharePoint groups. As stated the Controllers column is hidden on the SharePoint list and in the Power App but I want the value to be automatically set to 3 SharePoint Permissions groups (group names would be Leave Request Managers, Leave Request Admins, Leave Request Auditors) The SharePoint Groups use Web Enabled Security Group Emails.
How can I accomplish this?
