Guest users cannot access office365 groups connector..

(0) Share

Report

Posted on by SunnyTokyo

Hi fellows,

One of our canvas app includes "office365 Groups" connector as a connection used in the app.

In the same tenant, users can access and get responses successfully through the app,

but guest users with external email domain cannot access the app nor getting right response from the connector.

It's admitted officially for external guests as in the below URL.

https://docs.microsoft.com/en-us/powerapps/maker/canvas-apps/share-app#share-with-guests

And we already executed;

Set-AdminPowerAppApisToBypassConsent -AppName [thisApp]

But still we're struggling with the same problem. Does anybody encountered/solved the similar situation?

Thanks!

Categories:

Building Power Apps

I have the same question (0)

All responses (5)

Answers (1)

Sort by

v-xida-msft Microsoft Employee on at

Like
a
(0)

Report
Copy link

Link copied!

Hi @SunnyTokyo ,

Could you please share a bit more about your issue?

Do you mean that the Guest user in your Org could not access the Office 365 Groups connector in your shared app?

Further, have you assigned proper PowerApps license to this Guest user? Does the Guest user own a proper Office 365 license?

Based on the issue that you mentioned, I have made a test on my side, and don't have the issue that you mentioned. Please make sure you have assigned proper PowerApps license to this Guest user when you added this external account into your AAD. And this Guest user has owned proper Office 365 license already.

Currently, you could shared a canvas app including Office 365 Groups connector to a Guest user in your AAD. But when the Guest user run your shared app, it would be prompted to use their own credential to create a connection to the Office 365 Groups connector, so the Office 365 Groups connector would retrieve data from this Guest user's tenant/org rather than from your tenant.

More details about prerequisites of the sharing apps with Guest users, please check the following article:

https://docs.microsoft.com/en-us/powerapps/maker/canvas-apps/share-app#prerequisites-1

Best regards,

Was this reply helpful? Yes No
SunnyTokyo 29 on at

Like
a
(0)

Report
Copy link

Link copied!

Hi Kris, thanks again!
>Do you mean that the Guest user in your Org could not access the Office 365 Groups connector in your shared app?
The guest user is outside tenant user( e.g. "david@contoso.com") where our tenant is "@Fabrikam.com".
The shared canvas app is located inside "@Fabrikam.com" tenant.

>Further, have you assigned proper PowerApps license to this Guest user? Does the Guest user own a proper Office 365 license?
Yes, we(Fabrikam) purchased and allocated power apps plan1 to "david@contoso.com" . And the guest user have proper o-365 license.

>Currently, you could shared a canvas app including Office 365 Groups connector to a Guest user in your AAD. But when the Guest user run your shared app, it would be prompted to use their own credential to create a connection to the Office 365 Groups connector, so the Office 365 Groups connector would retrieve data from this Guest user's tenant/org rather than from your tenant.

Exactly, this seems what we're encountering now.. Is there any way to direct the connection to our AAD?
And thanks for the URL, can i expect this to be resolved when we're sharing the canvas app with Azure AD B2B based guest users?? I'm really lost in this point..

Was this reply helpful? Yes No
Verified answer

v-xida-msft Microsoft Employee on at

Like
a
(1)

Report
Copy link

Link copied!

Hi @SunnyTokyo ,

Thanks for your feedback. Unfortunately, if you want to share your own Office 365 Groups connection to the Guest user when you shared your canvas app, I afraid that there is no way to achieve your needs in PowerApps currently.

We could not share Office 365 Groups connection to the end users when we shared the canvas app to them. If you would like this feature to be added in PowerApps, please consider submit an idea to PowerApps Ideas Forum:

https://powerusers.microsoft.com/t5/Power-Apps-Ideas/idb-p/PowerAppsIdeas

As an alternative solution, you could consider create a server account in your Tenant, and then share this Server account to the Guest user (share the Server account and Password), and when the Guest users to run your shared app, please ask them to use the Server account to create a connection to the Office 365 Groups connector.

Best regards,

Was this reply helpful? Yes No
SunnyTokyo 29 on at

Like
a
(0)

Report
Copy link

Link copied!

Thank you Kris, appreciated so much on this!
I'd post the issue for ideas forum.

Was this reply helpful? Yes No
SunnyTokyo 29 on at

Like
a
(0)

Report
Copy link

Link copied!

Hi, Kris., just FYI.
I found alternative solution for this issue. Graph API based custom connector went successful with this issue.
https://youtu.be/ORHghzhvmyA

Cheers,

Was this reply helpful? Yes No