Power Platform: Limiting Solution Permissions Without Blocking Makers

(1) Share

Report

Posted on by CU27031833-0

Hi Everyone

I have a quick question: is there a way to restrict users from managing solutions in an environment, but still allow them to build apps and flows?

I tried creating a custom role based on Environment Maker, but it didn’t behave as expected, and the user ended up without the ability to create anything.

I would like, at a minimum, to prevent users from deleting solutions.Hi Everyone

I have a quick question: is there a way to restrict users from managing solutions in an environment, but still allow them to build apps and flows?

I tried creating a custom role based on Environment Maker, but it didn’t behave as expected, and the user ended up without the ability to create anything.

I would like, at a minimum, to prevent users from deleting solutions from another users.

Categories:

Governance & administering

I have the same question (0)

All responses (4)

Answers (0)

Sort by

Suggested answer

Pstork1 69,556 Most Valuable Professional on at

Like
a
(0)

Report
Copy link

Link copied!

The ability to delete a solution is controlled by setting permissions to a specific Dataverse table rather than adjusting the Environment maker role. Make a copy of the Environment Maker role and then edit it. Search for the Solution Table and remove the Delete permission from that Table for that custom role. If you assign the user that role that should prevent them from Deleting solutions but still let them create apps in a solution if they have the Environment Maker role.

----------------------------------------------------------------------------------
If this Post helped you, please click "Does this answer your question" and give it a like to help others in the community find the answer too!

Paul Papanek Stork, MVP
Blog: https://www.dontpapanic.com/blog

Was this reply helpful? Yes No
CU27031833-0 25 on at

Like
a
(0)

Report
Copy link

Link copied!

Hi @Pstork1, thanks for your replay.

I followed exactly that approach using the Admin Power Platform interface: I copied the Environment Maker role and assigned it to the user. However, the user gets a message saying they cannot create anything in the environment.

It also seems that when this role is copied, there are some internal permissions that is not able to replicate.

Was this reply helpful? Yes No
Suggested answer

11manish 3,333 on at

Like
a
(0)

Report
Copy link

Link copied!
It is not practical to fully separate solution management and app creation using roles alone.

A better approach is to define clear responsibilities:

Makers build apps and flows

Admins manage and control solutions

Was this reply helpful? Yes No
CU27031833-0 25 on at

Like
a
(0)

Report
Copy link

Link copied!

Thanks for the reply,

My scenario is this: I would like to prevent users from viewing or deleting other users' solutions in a Citizen Environment. The Environment function allows users to do this, but it doesn't allow them to view the applications and flows, only the solutions.

Therefore, would the best approach be to teach users about responsibility, rather than trying to block access?

Was this reply helpful? Yes No