Answered

Issue sharing a PowerApp with a guest user

(0) Share

Report

Posted on by PaulT

I am designing a PowerApp to be used with some external users. It will be used to allow them to fill out a form which sends data back to a SharePoint list.

I created the app, created some guest users in my tenant and I am successful in having them write back to the SharePoint list. I am now trying to only show them the list items that they are responsible for by filtering using email addresses. If I use a regular (non-guest) account then everything works just fine. I use the Office365Users connection to retrieve the email address of the current user.

When I try it with a guest users I get an error that access is denied to the Office365Users connector.

I have assigned the external users full Office licenses (for testing) and they can access the SharePoint lists but it's just the Office365 connector.

Can anybody tell me what I am doing wrong?

Thanks

Categories:

Governance & administering

I have the same question (0)

All responses (7)

Answers (1)

v-yutliu-msft Microsoft Employee on at

Like (0)

Report
Copy link

Link copied!
Hi @PaulT ,

Do you want to share an app connected with office365 users to external user?
I've made a similar test but not met the same problem like your description.

However, since you are an external user, you need to switch account when asking for permission of office365 users.

Switch to your external account.

Then choose your external account for multiple times.

Wait for a minute, the user email will show.

The formula that I use to show email:

Office365Users.MyProfile().Mail

What's more, if you still has problems, you do not need to use office365 users connector to get current user's email.

This formula is enough:

User().Email

Best regards,

Was this reply helpful? Yes No
PaulT on at

Like (0)

Report
Copy link

Link copied!

Thank you for your reply.
The problem with User().Email is it does not necessarily give the user's email address but it actually gives the user's UPN. Normally this might not be a problem but with guest accounts the UPN shows as "live#useremail@outlook.com".
Since we are creating the accounts this will always be the way it shows up (I hope) so I will just work to strip out the "live#" portion of the UPN and try using that.

Was this reply helpful? Yes No
v-yutliu-msft Microsoft Employee on at

Like (0)

Report
Copy link

Link copied!

Hi @PaulT ,

I do not mean that you set user's email when designing the app.

You could only make user switch to his account when he is running this app.

And the permission could only be allowed when he is running this app.

It can not be set in advance.

Best regards,

Was this reply helpful? Yes No
PaulT on at

Like (0)

Report
Copy link

Link copied!

The problem is the Office365Users connector is not working-when a guest user accesses the page they get an error message:

Office365Users.MyProfileV2 failed: { "error": { "code": "-2147024891, System.UnauthorizedAccessException", "message": "Access denied. You do not have permission to perform this action or access this resource.", "innerError": { "request-id": "dbfd6fda-2446-4ffe-903e-aadeb226af11", "date": "2020-05-14T15:47:33" } } }

Even when they accept the permissions they are unable to use this connector. My idea of stripping out "live.com#" does not work because people that are not using a Microsoft address get an entirely different format for their UPN.
Is there something that needs to be licensed that I am missing? I am giving the guest users full Office E2 licenses so I don't know what else they might require

Was this reply helpful? Yes No
v-yutliu-msft Microsoft Employee on at

Like (0)

Report
Copy link

Link copied!

Hi @PaulT ,

Actually, this license should be enough.

This error message should be about permission.

Please check whether you give the guest user the permission of viewing azure profile.

Best regards,

Was this reply helpful? Yes No
PaulT on at

Like (0)

Report
Copy link

Link copied!

So I don't think it is a permissions issue. I switched to using Office365Users.MyProfile().Mail (instead of Office365Users.MyProfileV2().Mail and now things are working properly.
I don't know if this is by design or a bug but it looks like MyProfileV2 doesn't work with the guest user accounts.

Was this reply helpful? Yes No
Verified answer

v-yutliu-msft Microsoft Employee on at

Like (1)

Report
Copy link

Link copied!
Hi @PaulT ,

The reason why Office365Users.MyProfile().Mail works, but Office365Users.MyProfileV2().Mail not works is that the result of these two functions are different.

You need to use:

Office365Users.MyProfileV2().mail

1)The result of Office365Users.MyProfile():

//The email column named Mail.

2)The result of Office365Users.MyProfileV2():

//The email column named mail.

Please read this doc about this connector in details:

https://docs.microsoft.com/en-us/connectors/office365users/#user

Best regards,

Was this reply helpful? Yes No