Users can write into dataverse table only through Canvas App

(2) Share

Report

Posted on by LucasSardo2

Hello Community.

I have the following situation, I have developed and application where Users can write data into one Dataverse table.

For security purpose, now I need to ensure that this user is just able to edit this table by using the Canvas App, and not going into the table and editing for instance.

to allow him to use the Canvas App correctly I needed to give him "read and write" permission to the Dataverse table, Is it possible to give something like "Read and Write only through App" permission ?

The idea is that through the App he will be only able to see his own data, and if he access the table directly he will be able to see other people data.

Any guidance on how to achieve this ?

thanks in advance,.

Categories:

Microsoft Dataverse with Power Apps

I have the same question (0)

All responses (3)

Answers (0)

scalca 243 Moderator on at

Like (1)

Report

I'd strongly recommend to work with security roles and table/record ownership feature when working with permissions on tables, records or columns.
that's the beauty of dataverse using all the features it offers.
here you'll find the official microsoft documentation
Security concepts in Microsoft Dataverse - Power Platform | Microsoft Learn

Was this reply helpful? Yes No
gulshankhurana 1,397 Moderator on at

Like (0)

Report

Hi

All you need to do is to give 'User' level access on the the Create, Read and Write permissions on the required table in the security role that you want to assign to the users.

Once you've configured the right level of access and permissions to the security roles, then you wouldn't have to worry about how the users try to access the data - directly, programatically, through model driven app or canvas apps.

I hope this information helps.

Kind regards

Gulshan

Was this reply helpful? Yes No
Shashank Bhide 942 Moderator on at

Like (0)

Report

So you want that the user should be able to only use Canvas app but not Dataverse? in that case giving security roles mean the users having access to Dataverse will be able to perform those operations through Dataverse as well, I believe the best way to achieve this is to not give the user any Dataverse access and instead have them use the Canvas app only, the Canvas app however connects to Dataverse using a power automate which uses a service principal, that way the users of the Canvas app are accessing Dataverse in the context of the service principal and not through their own.

Was this reply helpful? Yes No