Hi,
I have a canvas app that on start builds a collection from a Sharepoint list (List 1) for a drop down control. The List 1 will not be edited, just read, then the selected value will be written to List 2.
List 1 is stored in the Sharepoint space of a restricted Teams channel, but the App is for the whole company. Since PowerApps just uses the credentials of the logged in user, I realized I needed to give List 1 access (without access to the rest of the site) to all users to read and build the drop down values, or so I thought?
To test this I granted access (edit access to start) to a user not in the original Channel members to List 1 only, and not to the rest of the site. They were able to access List 1 in Sharepoint without issue and were denied access to the rest of the site. This is the expected result.
But when they tried to run the App, the drop down lists are not populating and there is an error saying they don't have permission to view the data.

What am I missing in terms of data access permissions?
Thanks