Power Platform Community Forum Thread Details

Hi Team,

I have created multiple flows that are integrated with the Copilot agent, and they are working correctly on my side. However, when I try to share these flows with other users, they are unable to install or add the flows.

I have already provided the required permissions, including Basic User Access and Environment Maker access, but the users are still encountering the same error while attempting to install the flow.

Could you please help investigate this issue and advise on what might be missing or causing the problem

error:

"env_time": 2026-02-26T08:53:15.4241415Z,

"message": Flow install failed with status code Forbidden for workflow 824a971a-554c-4957-911f-297c0c976b7a in environment 5fd8ee0e-3a71-eba0-af71-1044ae693317. Response: {"error":{"code":"InsufficientCdsPermissions","message":"User does not have sufficient permissions in Microsoft Dataverse for flow 'e1fb9757-ba01-8212-562d-7b16e50a62a2'."}},

"customDimensions": {"Type":"Flow","Method":"POST","ResultCode":"403","SanitizedUrl":"https://us.api.flow.microsoft.com/providers/Microsoft.ProcessSimple/environments/5fd8ee0e-3a71-eba0…,"Success":"False","SpanId":"de1d1a69d94f0c70","IsHighPriorityTenant":"False","TraceId":"4f4f8ee3d6e1ab52b2d6881d13acb41e","ResponseSize":"173","TotalMilliseconds":"872.9059","BotId":"LegacyBotId","TrafficSource":"LiveSite","StatusCode":403,"WorkflowId":"824a971a-554c-4957-911f-297c0c976b7a","EnvironmentId":"5fd8ee0e-3a71-eba0-af71-1044ae693317","Content":"{\"error\":{\"code\":\"InsufficientCdsPermissions\",\"message\":\"User does not have sufficient permissions in Microsoft Dataverse for flow 'e1fb9757-ba01-8212-562d-7b16e50a62a2'.\"}}"},

Categories:

Bot administration

Calling actions from Copilot Studio

Hi @SU-05030709-0,

When Copilot Studio “installs” a flow (adds it as a Tool/Action for another user), it’s not just flow-level permissions. It has to read and sometimes write Dataverse rows behind the scenes: the Process (workflow) row for the cloud flow, Connection Reference rows used by the flow, Solution metadata, Environment Variable rows, and whatever Dataverse tables the flow touches. If users lack read/activate rights on these tables, the install call fails with InsufficientCdsPermissions. Microsoft’s guidance also notes that environment access requires a license + membership + at least one Dataverse security role, and you can run user diagnostics to verify the exact gap.

There’s also a related doc where missing read on the Solution table causes “insufficient permissions” symptoms, adding prvReadSolution to the role resolves it. That’s a good hint that Solution/metadata privileges matter during install.

Finally, your screenshot shows several stale connections for tools. Stale or unconfigured connection references (or connections that users can’t use) often block installs/activation. Microsoft’s connection reference guidance explains how solution-aware flows bind to connection references and must be mapped to a valid connection at import/enable time.

How to confirm the root cause in <15 minutes>

1) Run diagnostics on one failing user in the target environment (Admin center). If it flags “no Dataverse role” or missing privileges, fix those first.
2) In make.powerapps.com → Solutions → [your solution], open Connection references and confirm they point to a valid connection owned by a service/maker account. If not, fix and save.
3) In Copilot Studio → Agent → Tools, open one of the failing flow tools and rebind to the same maker/service account connection (clear any “Stale” states).
4) If the install error persists, temporarily grant the user System Customizer, retry install. If it succeeds, the gap is purely Dataverse permissions, use the custom role approach above.

References:
https://learn.microsoft.com/en-us/troubleshoot/power-platform/dataverse/environment-app-access/troubleshooting-user-needs-read-write-access-organization

https://learn.microsoft.com/en-us/troubleshoot/power-platform/power-automate/desktop-flows/environment-load-fails-insufficient-permissions-after-2-46

https://learn.microsoft.com/en-us/power-automate/guide-to-cloud-flow-sharing-permissions

https://learn.microsoft.com/en-us/power-apps/maker/data-platform/create-connection-reference

https://community.powerplatform.com/forums/thread/details/?threadid=34b66786-e8e8-ef11-a731-7c1e52687e9d

https://www.linkedin.com/pulse/avoid-re-connection-re-authenticate-prompts-issue-copilot-londhe-iqbdc/

✅ If this answer helped resolve your issue, please mark it as Accepted so it can help others with the same problem.
👍 Feel free to Like the post if you found it useful.