Unanswered

Can I use a AD Security Group with Nested Groups to govern the PP Environment?

(0) Share

Report

Posted on by schuess3

353

I know there are issues with Sharing a Power App with an AD Group where the members of that group are nested under additional AD Security Groups.

My question is, does that also apply to the Security Group that governs the Environment as a whole?

In other words... Can I use a AD Security Group with Nested Groups to govern the PP Environment, but when sharing an app, only use security groups with named users?

Thanks

Matt

CC @Pstork1 @Reza @Shanescows

Categories:

Governance & administering

I have the same question (0)

All responses (2)

Answers (0)

jukka-niiranen 351 on at

Like (0)

Report
Copy link

Link copied!

I tested the nested groups feature as part of my exploration of the recent Azure AD preview for allowing nested groups in dynamic membership groups. This + the recent addition on the Dataverse side to support dynamic AAD groups for team membership unlock many interesting admin scenarios. The full blog post is here.

In my test the security groups worked the same way for environment security group as well as Dataverse group teams. Also, when creating a traditional non-dynamic nester group, the test user also received access to both the environment and the app. So, based on this I would say your scenario should be possible to implement.

Was this reply helpful? Yes No
Pstork1 68,867 Most Valuable Professional on at

Like (2)

Report
Copy link

Link copied!

I haven't tested that scenario, but I would avoid it if at all possible.

Was this reply helpful? Yes No