web
You’re offline. This is a read only version of the page.
close
Skip to main content

Announcements

News and Announcements icon
Community site session details

Community site session details

Session Id :
Power Platform Community / Forums / Power Apps / Unchangeable business ...
Power Apps
Answered

Unchangeable business units?

(0) ShareShare
ReportReport
Posted on by 122

I have a system I'm designing that has the concept of what largely resembles "SaaS Multi-tenant database" architectures, where there's a core set of relationships and hierarchy, but everything everywhere needs to always tie back to a core entity, which in this case is called a Partner.  A substantial portion of this data will be synchronized to us from a data factory, and it would be critical that all this data continues to be siloed for each partner.  

 

I understand that my goal should be to use business units to make this architecture work.  When data is synchronized, I can see how the process syncing could simply find the associated business unit that ties to the other system's partner id.  But, other than in rare circumstances where a manual entry has been fat fingered, we would never want our data to be able to be reassigned to another business unit.  

 

I've noticed that there's inherent behavor with the user/team ownership setup that changing the Owning User of a record will automatically change the Owning Business Unit of a record.  Is this something that can be turned off?  In other words, can I make it very difficult to ever change a business unit on a record once it's set?

 

Also, as an aside, is there any number of business unit hierarchies and relationships that can start to degrade overall performance that I should be aware of?

I have the same question (0)
  • ivan_apps Profile Picture
    2,189 Moderator on at

    Take a look at modernized business units and see if that will fit your use case. Perhaps assigning security roles from multiple business units will prevent the need to change the owning business unit. Video shows an explanation:

    https://www.youtube.com/watch?v=dVGklfmVr6s

     

    One thing you'd want to watch out for is overly sharing records. That will degrade performance at scale.

  • Verified answer
    Drew Poggemann Profile Picture
    9,287 Most Valuable Professional on at

    Hi @mhomol 

    As far as I know, the modernized business unit structure still allow a user that has ownership to the record to still assign an "Owning Business Unit" on the record (i.e. change this to a different business unit), in our testing it was even to a business unit that the user did not have a role in at all...

     

    Some thoughts:

    1. You should be able to map your Dataverse Group Teams to Entra ID Groups (https://learn.microsoft.com/en-us/power-platform/admin/manage-group-teams).  
    2. You can then lock down the changing of these groups in Entra ID to restrict who can change the members of these groups to limited personnel.
    3. In Dataverse, lock down your tables for "assign" permission to make sure all permissions for assigning records are within the business unit only so they are not able to assign outside of the business unit for any roles used.

    Another option to completely keep everything separate would be to review setting up different environments vs. using business units to truly keep this separation.  See the following to determine if this might be the right approach for your business case (https://learn.microsoft.com/en-us/power-platform/admin/multiple-online-environments-tenants#why-use-multiple-environments

  • ChrisPiasecki Profile Picture
    6,422 Most Valuable Professional on at

    Business Units are meant to be generally static in nature and work best when you know the number of required business units during design time. 

     

    Sounds like you may add/remove Partners over time and this could be a large number? In this case, I would suggest not going with a business unit per partner.

     

    I suggest using Entra ID (Azure AD) Group Teams as @dpoggemann suggests. These can be more dynamic in nature, allowing you to add/deactivate them over time with less administration effort, and will scale better.

     

    ---
    Please click Accept as Solution if my post answered your question. This will help others find solutions to similar questions. If you like my post and/or find it helpful, please consider giving it a Thumbs Up.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Introducing the 2026 Season 1 community Super Users

Congratulations to our 2026 Super Users!

Kudos to our 2025 Community Spotlight Honorees

Congratulations to our 2025 community superstars!

Leaderboard > Power Apps

#1
wolenberg_ Profile Picture

wolenberg_ 119 Super User 2026 Season 1

#2
WarrenBelz Profile Picture

WarrenBelz 107 Most Valuable Professional

#3
Haque Profile Picture

Haque 103

Last 30 days Overall leaderboard