Unanswered

Environment Security roles management via Power Automate

(3) Share

Report

Posted on by Community Power Pla...

I would like to use PowerAutomate to be able to remove the Security Role from the user (on any environment), unfortunately the action 'Edit_Environment_Role_Assignment' returns the following error:

The environment 'ENV_ID' is linked to a new CDS 2.0 instance. The operation 'POST/PROVIDERS/MICROSOFT.BUSINESSAPPPLATFORM/SCOPES/ADMIN/ENVIRONMENTS/MODIFYROLEASSIGNMENTS' is forbidden for linked environments.

So I would like to use REST API to be able to remove Security Role from the user.

I found this topic in the documentation:
https://docs.microsoft.com/en-us/powerapps/developer/data-platform/webapi/update-delete-entities-using-web-api#delete-a-single-property-value

Unfortunately, when I try to make such a query using HTTP blocks in PowerAutomate, I get a prompt:

Delete References directly is only valid for OneToManyEntityRelationship

QUERY:

{
"uri": "EnvLink/api/data/v9.1/systemusers(UserID)/systemuserroles_association/$ref",
"method": "DELETE",
"headers": {
"authorization": "*sanitized*",
"Content-Type": "application/json",
"Accept": "application/json",
"OData-MaxVersion": "4.0",
"OData-Version": "4.0"
},
"body": {
"@odata.id": " EnvLink/api/data/v9.1/roles(RoleID)"
}
}

Please help me to use PowerAutomate to remove Security Role from a user

Categories:

Using flows

I have the same question (0)

All responses (5)

Answers (0)

vishalc_ 2 on at

Like (1)

Report

hey, I'm on the same boat - were you able to find a solution for this?

Was this reply helpful? Yes No
Mitanshu 1,650 Moderator on at

Like (1)

Report
HTTP call should be:

METHOD: DELETE URI: https://[ENVLINK]/api/data/v9.1/systemusers(USER_GUID)/systemuserroles_association(ROLE_GUID)/$ref

You should leave body blank and keep everything AS IS in the original question.

Headers: { "Accept": "application/json", "Content-type": "application/json;charset=utf-8", "Authorization": "*sanitized*" }

ENVLINK is of format:

https://NNNNNN.crmN.dynamics.com

systemuserroles_association is a collection-valued navigation property.

Please click Accept as solution if my post helped you solve your issue. This will help others find it more readily. It also closes the item. If this post or my previous reply was useful in other ways, please consider giving it Thumbs Up.

Was this reply helpful? Yes No
shivam0712 2 on at

Like (1)

Report

Hi @happyume, I am trying to call the above http request but getting 401 error. can you please guide me about the authentication you used for the http action? Also, I have tenant admin access.

Was this reply helpful? Yes No
cristi03_92 4 on at

Like (1)

Report

Hey, were you meanwhile able to find a solution or workaround? I am facing the exact same error. Thanks!

Was this reply helpful? Yes No
Suggested answer

_daveB 6 on at

Like (1)

Report

Duplicated, see answer on this question: https://community.powerplatform.com/forums/thread/details/?threadid=02e3deff-8ed7-4819-88ae-b4cdd8005b0f

Was this reply helpful? Yes No