Dynamic row level security

(0) Share

Report

Posted on by mrstian89

315

I have a Power App for inventory in my company. The app is created for several different locations in the company.

This is separated in the Dataverse table by the column "Location".

Is there any way to create dynamic row level security for this?

Example: I create two security roles: "Location 1" and "Location 2".

In the Datverse table I only want those who have the security role "Location 1" to be able to add/edit data for rows containing "Location 1" in the location column. The same goes for the other security roles. I only want them to be able to add items, loan items and edit items at their own location.

Categories:

Microsoft Dataverse with Power Apps

I have the same question (0)

All responses (3)

Answers (0)

Sort by

Mira Ghaly 11,415 Moderator on at

Like (2)

Report
Copy link

Link copied!

@mrstian89

The only way to achieve this without code is to implement your locations as Business Units and hence then your security role to be configured per business unit.

https://docs.microsoft.com/en-us/power-platform/admin/security-roles-privileges?WT.mc_id=DX-MVP-5004221

Was this reply helpful? Yes No
mrstian89 315 on at

Like (0)

Report
Copy link

Link copied!

Thanks for the response! I am quite new to dataverse security!
How can I make sure that a Business Unit only have access to rows with: Location = Location 1?

Was this reply helpful? Yes No
Drew Poggemann 9,287 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Hi @mrstian89 ,

As @Mira_Ghaly mentioned. the Locations you mentioned would be setup as Business Units in the system. You can then assign users to the specific business units. When records are created in the business unit they are "in effect" tied to that location. You would not have a location column on your records but the "Owner" of the record would be assigned to the business unit... Business Units can Security Roles can work together so you can have some users see across all business units (create, read, update, delete) while other users can be setup (restricted) to a single business unit. A lot of options exist here...

https://docs.microsoft.com/en-us/dynamics365/customerengagement/on-premises/admin/create-edit-business-units?view=op-9-1

https://docs.microsoft.com/en-us/power-platform/admin/security-roles-privileges

Hope this helps. Please accept if answers your question or Like if helps in any way.

Thanks,

Drew

Was this reply helpful? Yes No