Skip to main content
Community site session details

Community site session details

Session Id :
Power Apps - Power Apps Governance and Administ...
Answered

Sharing a Power App to an Azure AD security group with security roles

(1) ShareShare
ReportReport
Posted on by 287

Hello community,

 

Power Apps are getting more and more popular and therefore the need to be able to manage larger amount user groups is growing. In my case I have thousands of end-users, who need the access to a Power App. There is a way to do that of course, by entering each person one-by-one in the sharing of the Power App. That is not a possibility in my case, without talking about the difficulty of handling the users who have left the organization!

 

I would like to use Azure AD groups to manage access in the Power App. I have read that this is possible but I am having some challenges with the implementation that's suitable for my needs.

 

Let's say I have a security group in Azure that has 2 members as shown below: 

VilPel_0-1673446583046.png

 

Now, I go to Power Platform --> Selected the correct environment --> Share the app... And I selected the security group as the user. Also, I want to assign certain security roles to the app's users. In my case, there is a custom security role that needs to be assigned to each app user, otherwise they won't have access to Dataverse tables. So, the sharing would look like this: 

VilPel_1-1673446868420.png

 

I expect each individual user part of this security group (Leroy Plumley and BusinessA DeveloperA) inherit the security roles given to the security group. But this is not really how it works...

 

After sharing the application to the security group, I navigate to the Power Platform admin center to inspect the users' roles. As you can see, the roles I gave to the security group are not given to Leroy Plumley: 

VilPel_2-1673447121053.png

 

In the Power App, the users are filtered depending on if they have been assigned a certain security role. Because the security role is not "given" to the user, the application is not able to detect the user and display them in the app.

 

Is this the expected behavior? Is there a way to get the security roles assigned individually by using Azure AD groups?

 

Thanks in advance,

 

Ville

Categories:
  • Verified answer
    jukka-niiranen Profile Picture
    351 on at
    Re: Sharing a Power App to an Azure AD security group with security roles

    The security role will indeed be under the resulting Dataverse team rather than an individual user. This team will be an Azure AD group team in Dataverse.

    Since you appear to be using Dataverse for managing the application logic anyway, you could build the user filtering as a saved view for the user table. For example, here's a view that will retrieve all users who are members of a Dataverse team where team name contains "Test Security Group":

    Users_in_a_team_-_view_filter.png

     

    This will save you from having to make calls to the Azure AD connector. Just use that new view from the user table as the data source for your galleries, collections etc. (assuming you're building a canvas app, not a model-driven app).

    For more background info, I've written a blog post called "How groups & teams work in Power Apps & Dataverse" that may help those who don't have a Dynamics 365/XRM background.

  • joe_hannes_col Profile Picture
    1,843 Super User 2024 Season 1 on at
    Re: Sharing a Power App to an Azure AD security group with security roles

    Hello @VilPel,

     

    In this case, the security role is assigned to the team, not the user itself.

    Would it help if you checked in the app if the user is part of the security group instead? https://learn.microsoft.com/en-us/connectors/azuread/#get-group-members

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Paul Stork – Community Spotlight

We are honored to recognize Paul Stork as our July 2025 Community…

Congratulations to the June Top 10 Community Leaders!

These are the community rock stars!

Announcing the Engage with the Community forum!

This forum is your space to connect, share, and grow!

Leaderboard > Power Apps

#1
WarrenBelz Profile Picture

WarrenBelz 791 Most Valuable Professional

#2
MS.Ragavendar Profile Picture

MS.Ragavendar 410

#3
mmbr1606 Profile Picture

mmbr1606 275 Super User 2025 Season 1

Featured topics