Answered

PowerApps and Sharepoint E3 license applied but reporting inability to open a different domain inside same tenancy

(0) Share

Report

Posted on by Community Power Pla... Microsoft Employee

Hi,

We have multiple domains inside our tenancy, ie Domain1.com and Domain2.com .. some users are in each domain, they are all managed through the same place in our portal, and all licensed the same way and all have E3.

When users from Domain1.com access the powerapp edited view of sharepoint everything works fine, when users from Domain2.com access the same item they get the following issue.

They absolutely have rights to the item as they are clicking the link to open the item from the list!

Is there a way to ensure all of our E3 users (in every domain inside our tenancy) are correctly being given access to view the form in powerapps?

Categories:

Building Power Apps

I have the same question (0)

All responses (4)

Answers (1)

Sort by

v-siky-msft Microsoft Employee on at

Like
a
(0)

Report
Copy link

Link copied!

Hi @Anonymous ,

The permission of PowerApps customized forms published with a SharePoint list inherits from the permission of SharePoint site.

You have to add users in other domains as the Guest in Azure AD, and then invite guests into SharePoint member group.

As long as the guest has permission to access the list, they’ll also be able to access the custom form.

Note: you need to go to edit and republish the PowerApps customized form after the guest is added into SharePoint site.

Sik

Was this reply helpful? Yes No
Community Power Pla... Microsoft Employee on at

Like
a
(0)

Report
Copy link

Link copied!

Thank you very much for your reply, unfortunately i have now been told by our test group that the issue is not limited to those with non default domains (all users are in our Tenancy anyway).

I might need to make a new post as the problem has nothing to do with the domains apparently.

Let me provide some more background to what i did as that might help explain the issue....

I created a MS team site, and are using the included SharePoint site. I have not added users to the Teams site or to the Sharepoint site.. i am sharing individual items in the Sharepoint list to the user. This works perfectly when using out of the box Sharepoint... all testing completed successfully when using the inbuilt Sharepoint list edit forms. (Sharepoint presumably has given "limited access rights" to the user to enable the user to see the list when i shared the item in the list).

When I edit the list form in Powerapps .. only users from the Teams site (o365 group) can access the Powerpp edited list form (everyone else gets the error shown in the image). Note that they even get given the option to request access to the powerapp (even though this is a SP Form Powerapp)... you cant actually allocate them the right to view the form as this issue should never happen according to Microsoft.

Sharepoint users can see the list, and the items i have given them permission for. and edit the item in the Sharepoint list item form.. all works correctly... when i make them a PowerApp edited Sharepoint form they cannot load the Powerapp form.

Any ideas ? Im guessing that PowerApp Sharepoint List forms require some extra permissions to the list? or for the user?

This is very confusing behaviour...

Was this reply helpful? Yes No
v-siky-msft Microsoft Employee on at

Like
a
(0)

Report
Copy link

Link copied!

Hi @Anonymous ,

You said that you didn't add users to SharePoint site, only shared individual items to them, right?

I think this is why the issue occurs.

You have to Add all users/guests into the SharePoint site Grop MemberShip in order for users/guests to inherit PowerApps customized form permission from SharePoint site.

Hope this helps.

Sik

Was this reply helpful? Yes No
Verified answer

Community Power Pla... Microsoft Employee on at

Like
a
(0)

Report
Copy link

Link copied!
Thanks, your right what i have discovered is

To edit the item in Sharepoint native form you must have
Item level permissions (obviously) to the item
AND
Limited Permissions to the list (this is automatically given by Sharepoint when the item is shared)

However when PowerApps is used to access the same item the following is required;
Item level permissions (obviously)
AND
List Read permissions ... "Limited Permissions" are no longer enough

So i think the only way to make this work is to ....
Give the group (Everyone) read access to the list...
Create an item
Disable Inheritance on the item
Remove the group (Everyone) from the item
Share the item to the individual users
Users can now use a PowerApp edited Sharepoint form to edit the item

Do you have any other insight or suggestions of another way to do this?

Was this reply helpful? Yes No