Entra groups used for role permissions - Microsoft Project?

(0) Share

Report

Posted on by RandomDept

696

Greetings all,

I am taking over our Power Apps environment which was sitting in an ungoverned state. IE default settings, everyone go for broke in the default environment.

I want to clean things up and ensure roles are generally assigned by Entra groups, however I do see a lot of 'Microsoft Entra ID Office Group' Type permissions or 'Project User / Project Common with the Administrator as 'Microsoft Project'.

I couldn't find much information about the Role specifics, but will take a wild guess that these would be from a Microsoft Project connector / Interaction? When I click on Edit team, I can see the administrator is listed as Microsoft Project, but I don't see any GUID / accounts or groups on our end that match.

So the questions really are..

1 - What is the trigger that creates those groups?

2 - What do the Project User and Project Common Roles actually provide.

3 - How do I check if it is even in use anymore?

Thank you

Categories:

Governance & administering

I have the same question (0)

All responses (2)

Answers (1)

Verified answer

SaiRT14 1,990 Super User 2025 Season 2 on at

Like (1)

Report

here are my thoughts:

1. What triggers the creation of 'Microsoft Entra ID Office Group' permissions?
These groups are auto-created when specific integrations or services within Microsoft Project interact with Dataverse. For instance:

Triggers:
When a Microsoft Project environment is linked to Dataverse.
When a Project for the Web resource, task, or schedule is created.
When Entra ID-based security is applied to manage access for Microsoft Project users.
The ‘Administrator: Microsoft Project’ setting is a placeholder account used by Microsoft to manage these interactions and enforce default permissions within the Project system.

2. What do the Project User and Project Common Roles provide?
Navigate to Power Platform Admin Center > Environments > Security Roles.
Select the role (e.g., Project User or Project Common) and review the permissions on the tables and actions.

3. How do I check if it is in use anymore?
Check for activity in Dataverse Audit Logs to see if Project-related tables are accessed by users with these roles.
Go to Power Platform Admin Center > Settings > Audit Logs > Search for Project-related activities.
If Microsoft Project isn’t actively used in your organization, the roles and groups may not be necessary. Engage with stakeholders to confirm.

Was this reply helpful? Yes No
RandomDept 696 on at

Like (0)

Report

Thank you, makes sense :)

Was this reply helpful? Yes No