Skip to main content
News and Announcements icon
Community site session details

Community site session details

Session Id :
Power Platform Community / Forums / Power Apps - Power Apps Governance and Administ... / Security Groups Settin...
Power Apps - Power Apps Governance and Administ...
Suggested answer

Security Groups Setting in different environments

(0) ShareShare
ReportReport
Posted on by LY-03060231-0 8
Hi, 
 
I have three environments: Dev, Test, and Prod. I would like to assign security groups to restrict access to these environments.
Currently, I’ve created two security groups which are DEV_SG and TEST_SG for the Dev and Test environments.
 
The goal is to:
Allow developers to access the Dev environment and create apps there.
Allow a different group of testers to access the Test environment and run the apps.
Keep the Prod environment open to all users to run the Apps in the company.
 
Should I:
Create two Teams for each security group in the Dev and Test environments,
After creating the teams, then assign the security role "Environment Maker" to the developer Team in Dev env., and
Assign the "Basic User" role to the tester Team in Test env.?
While creating the Team, I don't know which Membership type should I choose to?
 
 
I’m quite confused about the access permission differences between security groups, security roles, and membership types while creating a Team within an environment. Could you please share the best practice for managing access in this scenario? 
 
If there are any helpful articles, I would really appreciate your recommendations.
 
Many thanks in advance!
 
Best regards,
 
Lee
 
Categories:
Managed Environments
Management
Environment
  • Suggested answer
    Vejai SH Profile Picture
    Vejai SH 237 on at
    Security Groups Setting in different environments
    Hi Lee,
     
    If you want to restrict user in the environment, I would suggest you to go with Security Group for the environment,
     
     
    Based on your screenshot, "Members"  should be fine. if you dont have any Guest user. Before creating a Team in CRM, Entra group need to created. refer below article 
     
    Please note, you cant add or remove user for this Team Type directly in CRM, you have to do it in Entra.
     
    Thanks,
    Vejai SH
     
    Please mark as answer if my suggestion helps you.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

News and Announcements

Now Available: 2025 Release Wave 2
Welcome to the Power Platform Communities

Quick Links

Paul Stork – Community Spotlight

We are honored to recognize Paul Stork as our July 2025 Community…

Congratulations to the June Top 10 Community Leaders!

These are the community rock stars!

Announcing the Engage with the Community forum!

This forum is your space to connect, share, and grow!

Leaderboard > Power Apps

#1
WarrenBelz Profile Picture

WarrenBelz 791 Most Valuable Professional

#2
MS.Ragavendar Profile Picture

MS.Ragavendar 410

#3
mmbr1606 Profile Picture

mmbr1606 275 Super User 2025 Season 1

Last month Overall leaderboard

Featured topics

Product updates

Microsoft Power Platform Community release plans