Dataverse: Trigger flow when user security role changes

(1) Share

Report

Posted on by donalmc

303

I am trying to trigger a flow when a user is assigned or unassigned a security role in Dataverse.

This sort of change is written to the System User Role table; however, this is table is not available for selection in the Dataverse trigger.

I did try manually entering the table name (systemuserroles) into the trigger and subsequent actions confirmed PA could see the table, it just could not trigger the flow.

Has anyone been able to trigger a flow when a user is assigned or unassigned a security role in Dataverse?

I found Trigger Flow when a security role assigned to user in Dataverse (powerplatform.com) but this is clearly not the answer as it is triggering on when a security role is created.

Thanks!

Categories:

Building flows

I have the same question (0)

All responses (6)

Answers (0)

gavilap 3 on at

Like (0)

Report

I'm in the same situation, did you manage to solve it?

Was this reply helpful? Yes No
Gprior 184 on at

Like (0)

Report

Hello there,

same problem here!

Have you found a solution?

Thank you!

Giovanni

Was this reply helpful? Yes No
donalmc 303 on at

Like (0)

Report

Sorry @Gprior and @gavilap - I was not able to get anywhere with this

Was this reply helpful? Yes No
Suggested answer

Gprior 184 on at

Like (0)

Report

Hi there,

just a quick update on this topic based on what i found.

In Microsoft Dataverse, you cannot directly trigger a Power Automate flow when a security role is assigned to a user, because the systemuserroles (user-security role linking) table is not enabled for change tracking, auditing, or triggering flows directly.

I was not able to go deeper than that, but i've done extensive tests and i've not been able to trigger any flow when i change security roles. Based on suggestion of user Stampcoin on a topic i've opened as well (direct link), one suggested solution would be to check security role table on fixed schedule and save a picture of the records in a custom table to compare later.

Otherwise there are more complex solutions but i'm not skilled enough or not allowed (e.g. to use a Plugin or Azure Function via Dataverse Webhook).

I'll keep you updated in this.

Giovanni

Was this reply helpful? Yes No
Suggested answer

CU09120509-0 2 on at

Like (0)

Report
Create Manual flow or recurrence automate cloud flow as per need.

List Environment as Admin

Add condition to check the environment using environment variable

Fetch teams and filter team for azure security group id

Fetch related Users, filtering using teamid

Fetch Security Roles while applying to each user

Further, compose, do conversion for multiple roles for a user using join

Create custom entity to store the iser and its security role related data

In power automate flow, check condition if for any user, roles doesn’t exist

If it does, list records from custom entity, filtering email eq useremail

Lastly, check if the security roles you fetched for a user matches with the one in the custom entity record

If not, it means roles are modified and thereafter, update the securityrole column for a user in custom entity for the fields such as, securityroles, modifieddate to utcn

IMG_6694.jpeg

Was this reply helpful? Yes No
@rtdlov 16 on at

Like (0)

Report

Hey,

I doubt there is a trigger for this, all Admin connectors (for Power Platform tools) have only actions.

Regards,

Artjoms

Was this reply helpful? Yes No