Answered

List of System Administrators

(0) Share

Report

Posted on by SH-23090323-0

Hey Everyone,

I've been trying to get a list of all the System Administrators across all the environments we have for a very long time.

Just to be clear, I don't want just one Environment. We need to know about ALL of them and we have hundreds.

We unfortunately do not use Managed Environments just yet.

I have managed to install the COE Core components with a Power Platform Administrator Role Service Account. I can see there is an app as part of the solution called "Power Platform Admin View", which has a tab called "Security Role Permissions" but it's completely empty.

Has anyone had this happen to them? If so is there something obvious I'm missing?

Happy to try grab any more details if needed.

Thanks in advanced!

Categories:

Governance & administering

I have the same question (0)

All responses (9)

Answers (1)

Sort by

velegandla 204 Moderator on at

Like (0)

Report
Copy link

Link copied!

@Bam

Security Role Permissions does shows the system admins from all envs.

Make sure, "Sync Helper Get Security Role users" flow is running.

You can enable the flow from "Coe Admin command center" app.

====================================================

If I have answered your question, please mark your post as Solved.
If you like my response, please give it a Thumbs Up.

https://www.linkedin.com/in/devendravelegandla/

Was this reply helpful? Yes No
SH-23090323-0 76 on at

Like (0)

Report
Copy link

Link copied!

Hi Velegandla,

Good to know I'm on the right track. I can confirm the flow is switched on, but it doesn't look like it has ever ran:
Should the Power Platform Admin View app before triggering it to run?
If I try to run is manually, it asks for specific ID's:

Was this reply helpful? Yes No
velegandla 204 Moderator on at

Like (0)

Report
Copy link

Link copied!

@Bam

Its a child flow and should be getting called from main power apps and flow inventory cloud flows.

Go to Inventory Tab in the COE admin command center and make sure your sync flows are running.

Below links explains the steps.

https://learn.microsoft.com/en-us/power-platform/guidance/coe/setup-core-components#open-the-setup-wizard-to-complete-the-configuration

https://learn.microsoft.com/en-us/power-platform/guidance/coe/setup-core-components#turn-on-inventory-flows

====================================================

If I have answered your question, please mark your post as Solved.
If you like my response, please give it a Thumbs Up.

https://www.linkedin.com/in/devendravelegandla/

Was this reply helpful? Yes No
SH-23090323-0 76 on at

Like (0)

Report
Copy link

Link copied!

Yeah, I've had a look, it's on but has never run. I'm not sure how to trigger it to run.

Was this reply helpful? Yes No
velegandla 204 Moderator on at

Like (0)

Report
Copy link

Link copied!

@Bam

Make sure all the flows below are ON.

Only turn on the Admin | Sync Template v3 (Flow Action Details) flow if you are likely to perform analytics on the action level of the flow—for example, looking at who is using the Send Email or Get Item actions.

In next sync you should see the child flow running.

====================================================

If I have answered your question, please mark your post as Solved.
If you like my response, please give it a Thumbs Up.

https://www.linkedin.com/in/devendravelegandla/

Was this reply helpful? Yes No
SH-23090323-0 76 on at

Like (0)

Report
Copy link

Link copied!

I can confirm they are all on.
Sorry for the stupid question, but when you say, "In next sync you should see the child flow running.", what Sync are you referring to? and how do I trigger it?

Was this reply helpful? Yes No
Verified answer

velegandla 204 Moderator on at

Like (0)

Report
Copy link

Link copied!

@Bam

All the parent flows are scheduled ones and some runs daily and some runs weekly.

Running the "CoE setup and upgraded wizard" App should tell you if there is anything missing.

====================================================

If I have answered your question, please mark your post as Solved.
If you like my response, please give it a Thumbs Up.

https://www.linkedin.com/in/devendravelegandla/

Was this reply helpful? Yes No
SH-23090323-0 76 on at

Like (0)

Report
Copy link

Link copied!

Thank you, it started syncing and now I'm seeing all the system admins! Between this and the Powershell command to get all the Environment Admins, I can get a list of all the "over privileged" users!

Was this reply helpful? Yes No
bwbrandi1989 12 on at

Like (0)

Report
Copy link

Link copied!

I want to know why the email address is not an available field for this report/view? I managed to get this working, however user ID and User Name is all you get. This is not helpful if we are trying to manage all system admin and send communications out with updates etc. Can someone incorporate email address field so if they are member type this information is available????!?!?!?!?!

Was this reply helpful? Yes No