Unanswered

Environments Governance - Restrict PowerAps creation and allow usage for everyone

(0) Share

Report

Posted on by Community Power Pla...

Hi everyone, in this community.

Until couple months ago, i was able to restrict environment access with a security group but share apps from this environment to others.

Right now, if environment is secured with a group every needs to be a member of this group to be able to run apps from this environment. And this breaks my concept of a Production environment to which only Admins have maker access.

Need your advice is it possible to retain those same settings as before. Have a limited group of people with maker permissions in the environment, and rest of users should be able only to run apps in this environment shared with them.

Categories:

Governance & administering

I have the same question (0)

All responses (2)

Answers (1)

Verified answer

Hamish Sheild 3,005 Most Valuable Professional on at

Like (1)

Report

Hi

A few months back you would have received the following message in the Microsoft 365 Message Center. This is the change that you are seeing impacts from.

Adding a user to a security group for an environment does not give the user maker permissions in the environment, I just gives them access to see the environment. You have to also give the users the Environment Maker security role in order for them to be a Maker. And you also still need to share the apps within the environment for the users to access the apps.

Configure user security in an environment - Power Platform | Microsoft Learn

Message in Microsoft 365 Message Center

Message Summary
On October 24, 2022, we will begin releasing an update for canvas apps in Dataverse environments associated with a security group. The update will be fully completed in all regions by November 11, 2022.

How does this affect me?
Currently, in environments associated with a group, group membership doesn't influence users' ability to access canvas apps. Users with a sufficient license and have been shared canvas apps can run those apps.

After October 24, 2022, users will not be able to run canvas apps regardless of app share status unless they are in a security group associated with Dataverse. Instead, they will see an error page that informs them that they must contact their governance admin to continue using canvas app resources within the environment.

How do I prepare for this change?
There is no required action. It is recommended that you review any security group associated with Dataverse environments in Power Platform admin center and the memberships within those groups to ensure that all users have the correct access.

Was this reply helpful? Yes No
Community Power Pla... on at

Like (0)

Report

Thanks for the info. It helped at the beginning of my research. Also, i have found this blog which describes remarkably similar case to my and it is especially useful when looking at governance issues.
Set up security groups for your environments (michaelroth42.com)
How to solve a 'can't see the environment' issue in Power Platform - with cheatsheet (michaelroth42.com)

Was this reply helpful? Yes No