Answered

Environments - Teams and Access

(0) Share

Report

Posted on by sree813

Dears,

Currently I'm busy in setting up the access to Power Platform DEV and TEST Environments to my team.

Access to those environments is provided to our team members by creating Teams in Environment using our Office Group (Microsoft Entra ID Group) so that it is easy to manage the access when someone joins/leaves the team with Environment maker and System Customizer role.

Normally with these roles, the users should have access to Dataverse and should be able to create apps. But this is not the case.
Even when we change the role to System Admin, we still have the same issue.

As a work around, I have added the users via add user in the environment.

But I would still like to know and solve the above issue. Any thoughts?
Cheers!!

Categories:

General topics

I have the same question (0)

All responses (3)

Answers (1)

SudeepGhatakNZ 14,394 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

What you are doing is the correct approach. What issues are the users facing?

Was this reply helpful? Yes No
sree813 77 on at

Like (0)

Report
Copy link

Link copied!

Users cannot create apps and no access to Dataverse. They receive an error message saying that they do not have permission to create. Bu they can see the environment and access it. It's the issue when they try to do something in the environment.

Was this reply helpful? Yes No
Verified answer

sree813 77 on at

Like (0)

Report
Copy link

Link copied!

After checking with MS Team, they have mentioned that we should not use Microsoft Entra ID Group to give access to users to the environments. We should always use Security Groups.

But however, the documentation mentioned is quite contradictory (https://learn.microsoft.com/en-us/power-platform/admin/manage-group-teams?fireglass_rsn=true#fireglass_params&tabid=a82c790ad02541af&start_with_session_counter=6&application_server_address=euroclear7.prod.fire.glass). Hence, I have asked them to update the documentation and meanwhile I started using Security Group for the access.

Was this reply helpful? Yes No