User is missing prvAppendTo privilege (Canvas App, Dataverse)

(1) Share

Report

Posted on by IuriiPalchuk

Hi!

When user tries to create a Dataverse table record from my Canvas App (entity, let's call it Table A, is in 1:N relationship to another entity, Country) they see the following error:

Principal user (Id=guid, type=8, roleCount=3, privilegeCount=217, accessMode='0 Read-Write', AADObjectId='guid', MetadataCachePrivilegesCount=4989, businessUnitId=guid),
is missing prvAppendTonew_Country privilege (Id=guid) on OTC=10471 for entity 'new_country' (LocalizedName='Country').
Consider adding missed privilege to one of the principal (user/team) roles.
 
User is member of a Microsoft Team. Canvas App is shared to that Team with Security Role assigned. 
 
Security Role has the following privileges for Table A entity:
 
And for Country entity:
 
If I check access to a particular Country I see the following:
 
Diagnostics for this user shows:
 
If this is the reason for this issue, how can I avoid it? My canvas app users are Team members and inherit their role from that Team and none of them has a security role directly (manually) assigned to them.

Categories:

Microsoft Dataverse with Power Apps

I have the same question (0)

All responses (2)

Answers (0)

Suggested answer

Michael E. Gernaey 53,969 Moderator on at

Like (0)

Report
Copy link

Link copied!

Hi

Well for the record, you said they are Creating... and you do not give them Create privileges, it says so in your own picture.

As for your question, you cannot avoid it, you must assign them roles to access Dataverse Tables, etc etc.

Are you saying ONLY this user has an issue?

Was this reply helpful? Yes No
IuriiPalchuk 49 on at

Like (0)

Report
Copy link

Link copied!

@FLMike

Hi!

Well for the record, you said they are Creating... and you do not give them Create privileges, it says so in your own picture.

They are creating a Table A entity with a lookup to Country. They are not creating a Country. And the error is not "missing Create privilege", it is "missing AppendTo privilege". That's why I specified permissions matrix for both entities.

As for your question, you cannot avoid it, you must assign them roles to access Dataverse Tables, etc etc.

User inherits their Role from Team. But they don't have any Role directly assigned to them. Is this a root cause? Why then? If it is, how can I assign security roles directly to my end users automatically and what Role should it be (Basic User, I suppose)?

Are you saying ONLY this user has an issue?

This is a Test environment. This particular person is an example of a future app end user.

Idea is to add users to the environment by adding them to a specific Microsoft Team and my canvas app is shared to this particular Team with a Role assigned.

Other tester face no issues but they have a different set of privileges (e.g. Full Access to Country entity).

Was this reply helpful? Yes No