Dataverse security setup - Business Units/Teams

(1) Share

Report

Posted on by Jurbe48

Hi guys,

I need to setup a security model and I would appreciate some input and advice.

Here is my business case. I have a Model-Driven application with a custom table called "Affiliates" next to 20 other tables. We identified following user groups for our application:

Administrators
Corporate Team
Directors
Management
Employees

Each user group will have a different combination of permissions on the various tables, so a security role for each user group seems required.

In the "Affiliates" table we have records which can only be visible for people belonging to the following groups: Administrators, Corporate Team, Directors. This means that these records should not be visible to users who are part of Management or Employees. Other records should be visible to all users.

What would be the easiest way to achieve this?

Thanks!

Categories:

Building Power Apps

I have the same question (0)

All responses (3)

Answers (1)

Verified answer

KeithAtherton 3,707 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!
Hey. You could try the following model:

Create security roles for each group, e.g. Administrators Role, Corporate Team Role, etc

Configure each security role as required, e.g.:

Administrators Role: Affiliates table has Read = Organisation, etc

Management Role: Affiliates table has Read = None, etc

Was this reply helpful? Yes No

Suggested answer

SaiRT14

1,990 Super User 2025 Season 1 on at

Like (0)

Report

Copy link

Link copied!

setup a security model in a Model-Driven app that accommodates user groups with different permissions while enforcing record-level visibility for specific groups on the "Affiliates" table

Role	Create	Read	Write	Delete	Append	Append To	Notes
Administrators	✓	✓	✓	✓	✓	✓	Full access
Corporate Team	✓	✓	✓	✗	✓	✓	Limited delete rights
Directors	✗	✓	✓	✗	✓	✓	Read & update only
Management	✗	Limited	✗	✗	✗	✗	Cannot see restricted data
Employees	✗	Limited	✗	✗	✗	✗	Cannot see restricted data

Define Security Roles for User Groups, Set Up Ownership for "Affiliates" Table, Leverage Business Units and Use Team-Based Security.

let me know if you need more details.

Was this reply helpful? Yes No

Jurbe48 18 on at

Like (0)

Report
Copy link

Link copied!
Hi @SaiRT14,

Thanks for your answer, this is indeed what I want to do. I already created the security roles on the Affiliates table. However I'm struggling with the business units/teams setup.

There is a parent child hierarchy in the user groups eg: Directors can see everything from Management and employees but nothing from Corporate and Admin.

To give you an example on the desired setup:

Record A in the "Affiliate" table can be visible to all user groups

Record B in the "Affiliate' table can only be visible to Admins, Corporate Team and Directors

Record C in the "Affiliate" table can be visible to all user groups

...

I hope this gives a better idea on what I try to achieve? How with the business units/team based security look like?

Was this reply helpful? Yes No