web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

Community site session details

Community site session details

Session Id :
Power Platform Community / Forums / Power Apps / Unchangeable business ...
Power Apps
Unanswered

Unchangeable business units?

(0) ShareShare
ReportReport
Posted on by 122

I have a system I'm designing that has the concept of what largely resembles "SaaS Multi-tenant database" architectures, where there's a core set of relationships and hierarchy, but everything everywhere needs to always tie back to a core entity, which in this case is called a Partner.  A substantial portion of this data will be synchronized to us from a data factory, and it would be critical that all this data continues to be siloed for each partner.  

 

I understand that my goal should be to use business units to make this architecture work.  When data is synchronized, I can see how the process syncing could simply find the associated business unit that ties to the other system's partner id.  But, other than in rare circumstances where a manual entry has been fat fingered, we would never want our data to be able to be reassigned to another business unit.  

 

I've noticed that there's inherent behavor with the user/team ownership setup that changing the Owning User of a record will automatically change the Owning Business Unit of a record.  Is this something that can be turned off?  In other words, can I make it very difficult to ever change a business unit on a record once it's set?

 

Also, as an aside, is there any number of business unit hierarchies and relationships that can start to degrade overall performance that I should be aware of?

I have the same question (0)
  • ivan_apps Profile Picture
    2,187 Moderator on at

    Take a look at modernized business units and see if that will fit your use case. Perhaps assigning security roles from multiple business units will prevent the need to change the owning business unit. Video shows an explanation:

    https://www.youtube.com/watch?v=dVGklfmVr6s

     

    One thing you'd want to watch out for is overly sharing records. That will degrade performance at scale.

  • Verified answer
    Drew Poggemann Profile Picture
    9,287 Most Valuable Professional on at

    Hi @mhomol 

    As far as I know, the modernized business unit structure still allow a user that has ownership to the record to still assign an "Owning Business Unit" on the record (i.e. change this to a different business unit), in our testing it was even to a business unit that the user did not have a role in at all...

     

    Some thoughts:

    1. You should be able to map your Dataverse Group Teams to Entra ID Groups (https://learn.microsoft.com/en-us/power-platform/admin/manage-group-teams).  
    2. You can then lock down the changing of these groups in Entra ID to restrict who can change the members of these groups to limited personnel.
    3. In Dataverse, lock down your tables for "assign" permission to make sure all permissions for assigning records are within the business unit only so they are not able to assign outside of the business unit for any roles used.

    Another option to completely keep everything separate would be to review setting up different environments vs. using business units to truly keep this separation.  See the following to determine if this might be the right approach for your business case (https://learn.microsoft.com/en-us/power-platform/admin/multiple-online-environments-tenants#why-use-multiple-environments

  • ChrisPiasecki Profile Picture
    6,422 Most Valuable Professional on at

    Business Units are meant to be generally static in nature and work best when you know the number of required business units during design time. 

     

    Sounds like you may add/remove Partners over time and this could be a large number? In this case, I would suggest not going with a business unit per partner.

     

    I suggest using Entra ID (Azure AD) Group Teams as @dpoggemann suggests. These can be more dynamic in nature, allowing you to add/deactivate them over time with less administration effort, and will scale better.

     

    ---
    Please click Accept as Solution if my post answered your question. This will help others find solutions to similar questions. If you like my post and/or find it helpful, please consider giving it a Thumbs Up.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Forum hierarchy changes are complete!

In our never-ending quest to improve we are simplifying the forum hierarchy…

Ajay Kumar Gannamaneni – Community Spotlight

We are honored to recognize Ajay Kumar Gannamaneni as our Community Spotlight for December…

Leaderboard > Power Apps

#1
WarrenBelz Profile Picture

WarrenBelz 796 Most Valuable Professional

#2
Michael E. Gernaey Profile Picture

Michael E. Gernaey 327 Super User 2025 Season 2

#3
Power Platform 1919 Profile Picture

Power Platform 1919 268

Last 30 days Overall leaderboard