Power Platform Community Forum Thread Details

Hi

I'm in the process of building a model-driven app using Power Apps and have a table that records sales transactions across various regions. My goal is to set up specific access permissions such that a manager, like "Henry" for example, can only edit rows in the table where he is listed as the manager but he can view all rows. To provide a clearer picture, here's a portion of the table:

Date	Country	Region	Manager	Department	Product	Sales Amount (£)	Quantity Sold	Customer Name	Method
02/10/2023	United Kingdom	Manchester	James	Clothing	T-Shirt	800	50	Sarah Johnson	Cash
03/10/2023	France	Paris	Kat	Electronics	Smartphone	3500	8	David Wilson	PayPal
04/10/2023	Germany	Berlin	Henry	Furniture	Sofa	2000	2	Emma Davis	Debit Card
05/10/2023	Spain	Madrid	James	Electronics	TV	6000	5	Michael Brown	Credit Card
06/10/2023	Italy	Rome	Kat	Clothing	Jeans	1200	20	Lisa Taylor	Cash
07/10/2023	United Kingdom	Bristol	Henry	Electronics	Headphones	300	15	Robert Jones	PayPal
08/10/2023	Germany	Munich	James	Furniture	Dining Table	1500	3	Susan Clark	Debit Card

Using Power Apps' security roles and permissions, how can I enforce this granular level of access control, where managers can only edit entries where they are listed under the 'Manager' column but be able to view all rows? Any insights, guidance, or examples on achieving this would be highly beneficial.

Thank you in advance for your guidance!

Categories:

Microsoft Dataverse with Power Apps

Hi @HamidBee ,

The security model in Dataverse is based on the Owner of the record, not another column that might provide a lookup to the individual.

If you set the Owner (Team or Individual) of the record to Henry (which would be a user in the systemusers table) you can then setup roles to control the access as you require. See role permissions here (https://learn.microsoft.com/en-us/power-platform/admin/security-roles-privileges) and general security concepts here (https://learn.microsoft.com/en-us/power-platform/admin/wp-security-cds)

There are other concepts in the security that might be helpful depending on your needs:

Hierarchical Security - You can utilize Manager or Position hierarchy to provide ownership to a subordinate and allow the manager to view / edit the records (based on manager setup in the Users table and this can be integrated to Entra Id). (https://learn.microsoft.com/en-us/power-platform/admin/hierarchy-security?tabs=preview)
Field Level Security - You can setup Field Security Profiles to control access to specific fields on records to different groups of users. (https://learn.microsoft.com/en-us/power-platform/admin/field-level-security)
Access Teams - Control access to records dynamically to a list of users while proving access team profiles that can define what the users can do with the records when you add them to a team. (https://learn.microsoft.com/en-us/power-apps/developer/data-platform/use-access-teams-owner-teams-collaborate-share-information)