Power Platform Community Forum Thread Details

Hi All,

I am currently in the process of assigning a security role for a Dataverse table (Request). Within the request table, there is a column titled "Hub Name". We have a total of 5 hubs, each with its own respective manager. My objective is to ensure that when these managers log in to the app, they are only able to view the requests associated with their specific hub. To achieve this, I have created an Azure Active Directory group that includes all 5 managers as members.

Any suggestion would be highly appreciated?

Categories:

Building Power Apps

@Hit_23 ,

1.SecurityOnServerSide

In your newly create security role, I think that best is to set row security level to USER (for all rights Create, View, Edit, Delete, Append, Append To ..etc) for Request table . When a record is created in this table with a powerautomate flow or even you a simple business rule, set the owner (manager) of that record based on "Hub Name" column value. In this way the manager can only see its own records even he/she access it with a model driven app or a canvas app.

If you use a model driven app the manager natively can share or even reassign one or more records with/to his/hers colleagues . For canvas app, you need to build this module.

2. SecurityOnAppSide

Of course, you can filter data on app side (canvas app) with a condition related to current user and records Hub Name, but this "security filter" will be applied only in app, the users having access to all Request records.