Unanswered

Restrict environment users from creation of Apps, Flow, and Tables

(0) Share

Report

Posted on by devApps

Hi everyone,

We have a solution consisting of canvas apps, flows and tables. I have assigned them security roles as 'Basic user' and 'System customizer' while sharing the app. After that, the users get access to that environment. They can play the canvas app and read and write access of dataverse table. User has no access to edit or delete app and dataverse table available in that environment. That is okay for us.

But because of 'basic user' and 'system customizer' security role, user get access to create new app, flow, table and other objects in that environment. How to restrict the user from creation or deletion, but not from reading and writing in an environment ?

Categories:

Governance & administering

I have the same question (0)

All responses (2)

Answers (0)

joe_hannes_col 1,843 Super User 2024 Season 1 on at

Like (1)

Report
Copy link

Link copied!

Hello @devApps,

You can be much more restrictive in terms of permissions for your users to customize resources in your environment while still allowing them to use your apps and flows.

However, to do this, you will have to create custom security roles. In these security roles, you can define very granularly what tables a user with this role has access to, if they can create new data inside it etc. You can find out more about this here.

Your users can currently create new apps, flows, etc. because of the System Customizer role. This role should only be awarded to users who administrate the environment and need to import new solutions etc.

Was this reply helpful? Yes No
velegandla 204 Moderator on at

Like (2)

Report
Copy link

Link copied!

@devApps

End Users using the application should never get a system customizer role in a production environment.

This role should be given only in a development environment while people developing solutions.

Always make a custom security role copied from the minimum permissions (App opener role or basic user), then grant access to custom database tables that need required permissions.

I recommend watching the video explaining the dataverse security concepts.
https://www.youtube.com/watch?v=8UWSj-vvxzU

====================================================

If I have answered your question, please mark your post as Solved.
If you like my response, please give it a Thumbs Up.

https://www.linkedin.com/in/devendravelegandla/

Was this reply helpful? Yes No