Answered

Will Flow break CDS security role priviledge?

(0) Share

Report

Posted on by xilef

If a user was assigned a security role that has only view priviledge on an Entity, and the user triggered a flow that will modify that Entity, will the flow fail to execute?

Categories:

Building Power Apps

I have the same question (0)

All responses (6)

Answers (1)

Sort by

v-xida-msft Microsoft Employee on at

Like (0)

Report
Copy link

Link copied!

Hi @xilef,

How do you trigger/fire the flow that you mentioned? From a Button within an app?

Do you create this flow by yourself? Or you just trigger the flow from a shared app?

I suppose that you fire/trigger the flow from an shared app, is it true?

When you fire/trigger a flow from a Button within a shared app, if you don't have edit permission to the specific CDS Entity, your flow would fail to execute.

Actually, when you run an app which includes a flow, you would be prompted to confirm or update any connections on which the flow relies. If the account you use to confirm or update the CDS connection the flow relies on does not have edit permission to the specific CDS Entity, when you fire/trigger the flow, the flow would fail to execute.

More details about sharing a flow connection within an app, please check the following article:

https://docs.microsoft.com/en-us/powerapps/maker/canvas-apps/share-app-resources#flows

Best regards,

Kris

Was this reply helpful? Yes No
xilef 60 on at

Like (0)

Report
Copy link

Link copied!

Thanks for your reply. I have to clarify my question.

I have Entities A and B, my user will have create & view permissions on A but only view permission on B. And I have a flow that is triggerd by "When a record is created in CDS" monitoring the A Entity, which will then create some items on Entity B.

Now the user creates a record in Entity A in the App. Since the flow is triggered by the creation of record in A, there is no directly connection between the App and Flow. Will this flow then successfully create some items on Entity B?

Was this reply helpful? Yes No
v-xida-msft Microsoft Employee on at

Like (0)

Report
Copy link

Link copied!

Duplicated

Was this reply helpful? Yes No
xilef 60 on at

Like (0)

Report
Copy link

Link copied!

This seems like relavent to another question?

Was this reply helpful? Yes No
Verified answer

v-xida-msft Microsoft Employee on at

Like (1)

Report
Copy link

Link copied!

Hi @xilef,

Based on the clarification that you provided, I think your flow would be triggered/fired well.

The "When a record is created in CDS" trigger would detect if there is new record created in your Entity A, if yes, the trigger would be fired.

Because you created this flow, the "Create a record" action in your flow would use your own connection (rather than the user's) to create corresponding record in your Entity B. In other words, the execution of "Create a record" action in your flow is based on your own CDS connection rather than the user's.

Best regards,

Kris

Was this reply helpful? Yes No
xilef 60 on at

Like (0)

Report
Copy link

Link copied!

In this case, the flow will be counted as run by me, not by the user who created the record in Entity A, is it correct?

Was this reply helpful? Yes No