Hi,
I'm having an issue with run-only permissions of a flow.
Architecture
I have a canvas app, which acts as an input form for the application. The app has a button, which triggers a power automate flow. The flow is associated with the canvas app. The flow is a premium flow, which uses Dataverse. The flow is shared with a group "Users" as Run-Only users. It uses the connection of the owner of the flow. The canvas app is also shared with the "User" group. The users in the "User" group do not have any Power Platform licenses (premium or power apps/automate for O365). But pay-as-you-go licensing is activated for the environment and the canvas app. The environment is a production environment. A team exists for the "User" group, but it does not have any security roles assigned.
Problem:
Users can open the canvas app and enter their information. When the press the button to trigger the flow the get the following error message:
"Sendrequest.Run failed: ... code: 0x80040220 .... Principal user .... is missing prvReadWorkflow privilege on OTC=4703 for entity 'workflow' ..."
For some users the error message disappears after they refresh the application, but the flow does not trigger. For some users the app and flow work fine after 1 or 2 days.
I tested this on a different tenant with a non-premium flow, though, but users not having licenses or security roles either. There it worked fine.
Does anybody know what the issue may be?
Regards