web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

Community site session details

Community site session details

Session Id :
Power Platform Community / Forums / Power Apps / User Access Management
Power Apps
Unanswered

User Access Management

(1) ShareShare
ReportReport
Posted on by 28

I want to add a security group to a Power App that uses a Dataverse connection.

However, I have a question:

Should I assign the security group at the Canvas App level, or is it necessary to assign it at the Environment level?

 

If I assign the security group at the Canvas App level, will the users still be able to add, update, and delete records in Dataverse from the Power Apps Canvas screen and also run Power Automate flows triggered from the app?

Or What procedure should I follow?


Thank You!

Categories:
I have the same question (0)
  • Suggested answer
    Michael E. Gernaey Profile Picture
    53,351 Super User 2025 Season 2 on at
     
    So users must be valid users, with a license to Dataverse within the environment that you speak off. If they have that, they would have have permission to the Flows.
     
    But directly, you would share the SG to the App (not directly in Dataverse), because apps are shared in their own way.
     
    as long as that security group (or however you have it setup) also give them access to the Tables in Dataverse  you are good.
     
    1. A license to dataverse simply allows them access to the environment
    2. Security roles are required to define what access they have
    3. Cutomizations of those security roles, defines what they can DO.
     
    So imagine
     
    Michael has a license to dataverase
    You go to the Admin center, and click All Users and yep you see me.
     
    I try to log into the App and it says GO AWAY
    a) make sure you added me as a user or co owner at the App level, which will also share the connections
    b) make sure you gave me at least Basic User role at the Dataverse level
    c) make sure I have a dataverse premium license and or a Per App, Per Flow licenses
    d) make sure that whatever Role(s) you give me, at least one of them has special privileges to the Tables that the app uses.
    Meaning you go to the Role
    Edit it
    click on Tables
    click on Customized Tables (if they are)
    add the permissions that the role has
     
    And bingo it all works :-)
     
    Please please do not just give people System Admin to be lazy you will regret it one day
     
    If this answers your question, please Mark as such and maybe a like.
     
    Thanks!
  • Suggested answer
    ronaldwalcott Profile Picture
    3,847 Super User 2025 Season 2 on at
    The answer is always it depends.
     
    Assign the group at the canvas app level so that the group only has access to the app and not necessarily any other apps in the environment. This does not give them access to Dataverse.
    The users still need access to any data sources used by the canvas app or flows so configure those as well See Security concepts in Microsoft Dataverse - Power Platform | Microsoft Learn
     
    See Share a canvas app with your organization - Power Apps | Microsoft Learn for an understanding of the sharing process
     

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Forum hierarchy changes are complete!

In our never-ending quest to improve we are simplifying the forum hierarchy…

Ajay Kumar Gannamaneni – Community Spotlight

We are honored to recognize Ajay Kumar Gannamaneni as our Community Spotlight for December…

Leaderboard > Power Apps

#1
WarrenBelz Profile Picture

WarrenBelz 717 Most Valuable Professional

#2
Michael E. Gernaey Profile Picture

Michael E. Gernaey 329 Super User 2025 Season 2

#3
Power Platform 1919 Profile Picture

Power Platform 1919 268

Last 30 days Overall leaderboard