Hey All,
We are trying to restrict users in our organization from creating any kind of PowerApps in their assigned environments. But they MUST be able to create flows in their assigned environments. Environments are of type Sandbox.
So far I tried the below steps but no luck.
- Created a custom security roles by duplicating Environment Maker role.
- In the duplicate role I have set all the privileges to "None" for "Canvas App" and "Model-driven App" tables.
- Kept the privileges for the "Process" table intact.
- Saved and assigned the role to a test user.
Now, after logging as the test user, it is restricting the creation of canvas apps and model driven apps (as expected) but it is also not letting the user create any flow in that environment. Getting the below error when trying to save the flow.
"You are not permitted to make flows in this {environment_name}. Please switch to environment where you have maker permission."
So I have the following questions.
- After removing privileges for only the PowerApps components (canvas app and model driven apps tables), why am I barred from creating any Power Automate flows? Since I did not make any change to the Process table
- After applying a security role to a user or team in power platform admin center, how long does it take for the permissions to sync?
- How can we restrict Power Pages sites creation in an environment? I could not find any table related to it like we have for canvas and model driven apps.
Please note, the environment in question is a sandbox environment and not a default environment.
As I mentioned earlier we are trying to set up a governance by restricting users to create apps in their assigned environments. Thus, any insights or resolution from community members would be really appreciated. Thank you for your time.

Report
All responses (
Answers (