Unanswered

Preventing users from creating new environments

(0) Share

Report

Posted on by SHEPIANG

What does the global administrator need to do to prevent users from creating new environments within a business office 365 set up?

Thank you

Categories:

Governance & administering

I have the same question (0)

All responses (5)

Answers (0)

Hamish Sheild 3,005 Most Valuable Professional on at

Like (0)

Report

Hi @SHEPIANG ,

By default users can create environments based on the licenses they have. See the following documentation on which licenses can create environments.
https://docs.microsoft.com/en-us/power-platform/admin/create-environment#who-can-create-environments

You can also update a setting so that only admins can create environments which is outlined here https://docs.microsoft.com/en-us/power-platform/admin/control-environment-creation

The other alternative is to create your own Power Apps or Flows using the Power Platform for Admins connector to help monitor and alert who is creating environments.
https://docs.microsoft.com/en-us/connectors/powerplatformforadmins/

Was this reply helpful? Yes No
SHEPIANG 23 on at

Like (1)

Report

Thank you

But non of the documentation shows how to stop a user creating a development environment.

Was this reply helpful? Yes No
Hamish Sheild 3,005 Most Valuable Professional on at

Like (0)

Report

Hi @SHEPIANG ,

Development environments are a special case and can't be restricted through any sort of settings. Take a look at the Type of Environments section in this article https://powerapps.microsoft.com/en-us/blog/establishing-an-environment-strategy-for-microsoft-power-platform/ where it states "Provisioning developer environments cannot be restricted unless through a support ticket."

If you want to restrict Development environments from being created then you need to raise a support case with Microsoft.

Was this reply helpful? Yes No
v-siky-msft on at

Like (1)

Report

@SHEPIANG

I agree with what @HSheild said.
The developer environment can only be restricted by MS support.
Please submit a ticket from https://admin.powerplatform.microsoft.com/support
Sik

Was this reply helpful? Yes No
davidme on at

Like (3)

Report

The developer environments are indeed a bit special. Once a user has signed up for the community plan, a developer environment will be auto-created for the user. It can be deleted by a tenant-level admin, but the next time the user signs in and still has the community plan assigned, it will be created anew.

Currently the only way to block this behavior is to block the "internal consent plans" in the tenant by using the Remove-AllowedConsentPlans PowerShell cmdlet, which also blocks trial licenses. The procedure is self-service and is described here:
https://docs.microsoft.com/en-us/power-platform/admin/powerapps-powershell#block-trial-licenses-commands

We are considering approaches to giving more granular governance control over the developer environments.

Was this reply helpful? Yes No