Answered

How Azure AD Connector works in PowerApps?

(0) Share

Report

Posted on by Dave Wi

Hello,

When I try to add Azure AD Connector in my App, I am facing an access permission issue like this - https://tech.xenit.se/granting-permissions-for-single-users-to-azure-ad-connector-in-flow-and-powerapps/

That means, only user having following permissions can add Azure AD Connector in the app:

Directory.ReadWrite.All
Group.ReadWrite.All
User.ReadWrite.All

However, I need to understand following:

If user with above permissions adds Azure AD connector and implement the actions in App based on it, does it mean that all users who are accessing this app would need same directory permissions to execute those actions? Or it's only for a user who adds Azure AD connector to the App?

Thanks and Regards,

Categories:

Building Power Apps

I have the same question (0)

All responses (6)

Answers (1)

Verified answer

Pstork1 69,129 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Yes, that would require all users using the app to have those permissions. Power Apps doesn't have a capability to do elevated security or impersonation.

Was this reply helpful? Yes No
55552 676 on at

Like (0)

Report
Copy link

Link copied!

I am trying something similar now. I have a PowerApps app where I want some of the app fields to become read-only vs. editable based on who is logged in. We have Azure ID (Entra ID) groups set up, and was hoping to use those groups to accomplish this.
If an admin adds the Microsoft Entra ID connector to PowerApps, would all the app users need to have permissions on that connector? We only need read permissions from Azure in the app, not changing anything, simply checking what group a user belongs to, and modifying the DisplayMode of several fields to be "view" vs. "edit" based on their Azure ID Group.

Was this reply helpful? Yes No
Pstork1 69,129 Most Valuable Professional on at

Like (1)

Report
Copy link

Link copied!

Yes all users would need Entra permissions to use the Entra connector. But it may work if the users all have Read permissions.

Was this reply helpful? Yes No
55552 676 on at

Like (0)

Report
Copy link

Link copied!

Any other options since the Entra connector is not shareable? I was considering Office 365 Groups, but just read that connection is also not shareable, and each user would need to add the connector individually. This would not work in our case.

Was this reply helpful? Yes No
Pstork1 69,129 Most Valuable Professional on at

Like (1)

Report
Copy link

Link copied!

The only other option would be to duplicate the user list in something like SharePoint which is a data source that can be shared with external users.

Was this reply helpful? Yes No
55552 676 on at

Like (0)

Report
Copy link

Link copied!

Thanks. In this case, I could use Power Automate to do a periodic copy of the Azure or Office365 Group data to SharePoint or Dataverse, so that may work.

Was this reply helpful? Yes No