Field Level Security - Elevate read only access?

(0) Share

Report

Posted on by Reigningfear

139

Hello everyone,

I feel like I am missing something very crucial and basic. My goal is to provide read access to a read to a group of users and permit them to edit 2 fields in that record within a canvas app. The security profile is provisioned correctly and they can see the record in the powerapp. I created an FLS profile which contains the two fields in question with the following set up:

The correct users have been added to this profile as well and I know it works because they can see the field value. I was under the impression that an FLS profile could elevate their access to the specified fields while retaining the read-only access to the rest of the record however PowerApps throws an error saying they need write access to the table when they try to edit those 2 fields:

What am I missing?

Categories:

Microsoft Dataverse with Power Apps

I have the same question (0)

All responses (2)

Answers (1)

Verified answer

Drew Poggemann 9,287 Most Valuable Professional on at

Like (3)

Report

Hi Reigningfear,

This is not exactly how it works. The user would need to have write permissions to the record to be able to save it, assigning field level permissions to the user does not elevate them to have the ability to write the record and only those two fields.

You would need to do the following if you want to accomplish this:
1. Provide role with security to update the records to the users
2. Enable field level security on all fields that you would want to update on the record (overall) by any of the users
3. Setup two field security profiles with one assigned to all the users that will update everything and these will have "Yes" for create, read, update and the 2nd profile for the restricted users that will have only read for most fields and update for the ones you allow them to change.

Thanks,

Was this reply helpful? Yes No
Reigningfear 139 on at

Like (0)

Report

Thank you for your reply @dpoggemann. I proceeded as you suggested and was able to accomplish the requirement. Certainly a bit more effort to do it this way but at least it gets the job done!

Was this reply helpful? Yes No