You’re offline. This is a read only version of the page.
62
Hello everyone,
This topic is really important for me/our company so any help is highly appreciated!
I played around assigning different security roles to users of a model-driven app. Unfortunately I removed the system administrator role from myself. Now there is no System admin anymore in this environment and we can't access or edit some of our apps. Assigning a new sys admin is not possible because only sys admin can do this. I already contacted our IT specialist with Global Admin rights for our Microsoft tenant but even he can not add the sys admin role to this environment.
This is quite urgent because it is our production environment. I did not know that you can remove the sys admin role when it is the last one in this environment. Hopefully we can "rescue" this environment...
Is there a way for me/any person in our company to regain sys admin rights for this environment?
Thank you so much for your help!!
You are my lifesaver, thanks!!!
Select other user and assign sys admin role, and after that ask that user to assign sys admin role to you!
@Anonymous You are my personal hero of this week 🙂 I don't need to perform restore backup
Although I figured it out my myself in the end, you gave me emotional support yesterday when the situation looked grim haha. Thank you so much!
The problem in the end was that I just needed to refresh my user in the Power Platform admin center. Then the sys admin role was correctly assigned to me.
So for everyone with the same issue: Go to the users list in the power platform admin center, pick the user for the sys admin security role, then click on "Refresh user" (see screenshot). Then the role should be correctly assigned or you can assign the role manually afterwards.
ups, then the last resource would be a restore
Back up and restore environments - Power Platform | Microsoft Learn
have you tried it?
I also think that this is very strange... In the attached screenshot you can see that I have the AD role assigned.
I am not sure whether we use PIm or not, I dont think so.
Could it be the problem that I removed the sys admin role while sharing the model-driven app? So I removed the sys admin role in the Share a model-driven app window. I thought that it would only remove the sys admin role for this app (!) and not for the whole environment... I'm kind of frustrated at this stage.
But thank you already so much for your time and help! Much appreciated
weird.... I just tested that in my testing tenant and is working...
can you double check you have the AD role assigned? is your company using PIM?
Can you try the following?
please let me know if that was possible
When I try to add the sys admin role i get this error:
Failed to assign role 'System Administrator' : privilegeDenied (see Screenshot)
The AD role is supposed to allow you to change anything in the environment..
what happens if you go to the admin site https://admin.powerplatform.microsoft.com/environments open the environment settings, search for roles and then try to add yourself in the sys admin role?
#1
WarrenBelz
791
Most Valuable Professional
#2
MS.Ragavendar
410
#3
mmbr1606
275
Super User 2025 Season 1
Share
Report
All responses (
Answers (
