Answered

Who´s is running the action when calling a Power Automate flow?

(0) Share

Report

Posted on by Kranis

In my PVA I need to trigger a Power Automate which creates data in Dataverse. I want it shall be created under the triggering end user from Teams.

If a end user is using the bot through Teams, will the Power Automate know who is the calling user when performing an Dataverse action? (When we select Run as "User" on the Dataverse action)

Hope it´s clear! thx!

Categories:

General topics

I have the same question (0)

All responses (3)

Answers (1)

HenryJammes on at

Like (0)

Report

Hi @Kranis,

The cloud flows triggered from Power Virtual Agents run in the context of the connection used for the cloud flow configuration (by default the one of the user who configured the flow), not in the context of the chatbot end-user.

That said, Dataverse allows for impersonation using the Web API when passing a CallerObjectId parameter (unfortunately I don't believe the option is available in the standard Microsoft Dataverse Connector).
So, with an HTTP request, you should be able to use the current user's Azure AD Object ID to make impersonated calls to the Web API: Impersonate another user using the Web API (Microsoft Dataverse) - Power Apps | Microsoft Learn

Henry

Was this reply helpful? Yes No
Kranis 11 on at

Like (0)

Report

Thanks for a great explanation 😀

Few follow-up questions:

Can we change it to the context of the chatbot end-user? Any idea how?

In my case, I also have a need to run the Office 365 Outlook Connector in the end-users context. As I understand, there is not really an OOB solution for this. Perhaps we can use the WebApi even for this?

Was this reply helpful? Yes No
Verified answer

HenryJammes on at

Like (0)

Report

No, you can't change it to the context of the end-user.

The best you can do, when the user is authenticated in PVA, is to use either user Azure AD Object ID or Access Token as a variable that you pass to Power Automate. Then in Power Automate, you need to work with connectors that can accept these to make delegated calls (and so run in the context of the end-user).

Dataverse lets you do that, but you need to use the Web API through HTTP requests (either with the HTTP connector or the HTTP with Azure AD one)

Was this reply helpful? Yes No