Unanswered

Creating an environment with CDS and grant everyone Maker role

(0) Share

Report

Posted on by MarkPP

107

In the same way the default environment automatically gives everyone Maker access is it possible to create a separate environment which has a CDS database and automatically assign all users maker access (Including new users in the future)?

If it is possible how do you go about doing?

Thanks in advance

Categories:

Governance & administering

I have the same question (0)

All responses (4)

Answers (0)

Hamish Sheild 3,005 Most Valuable Professional on at

Like (0)

Report
Hi @MarkPP

You can do this a couple of ways but requires you to build something:
Via a PowerShell script using the Power Apps cmdlets for administrators
Or create your own Power App or Flow using the PowerPlatform for Admins connector
Both of these allow you to create environments and set the permissions.

Note, that they are both in Preview at the moment.

-----

If this post has answered your question please consider it for "Accept as Solution" or if it has been helpful give it a "Thumbs Up."

Was this reply helpful? Yes No
MarkPP 107 on at

Like (0)

Report

@HSheild I can create the environment using the PowerPlatform for Admin connectors and could grant permission at the point of creation but i would want this environment to allow all users to create apps. Therefore if new users are added into AAD they are automatically given Maker rights. We are also talking thousands of people in the directory. Are you suggesting this is possible with the PowerPlatform for Admin Connectors?

Was this reply helpful? Yes No
Hamish Sheild 3,005 Most Valuable Professional on at

Like (0)

Report

Hi @MarkPP,

The Power Platform for Admin connector isn’t going to do it by itself but if you tie it in with your user creation process in AAD then giving a user permissions to an environment using the Power Platform for Admin connector can be automated.

Also, you can assign environment permissions to AAD security groups. Add your users to that group when they are created in AAD. This can be done via script or Flow connectors.

Was this reply helpful? Yes No
MarkPP 107 on at

Like (0)

Report

@HSheild Thanks for your replies. So a couple of things.

Using a security group is absolutely the way i want to go but i am finding that i am either doing something wrong or it isn't working. I have added a separate post about this exact thing. https://powerusers.microsoft.com/t5/Power-Apps-Governance-and/Managing-environment-permissions-with-Security-Office-Groups/m-p/456320#M1960

Secondly if you want all users in the organisation to have the maker right then surely there must be an internal group which already has everyone in especially if the default environment does this. Also if you share an app there is the built in Everyone in <Org Name> which i would have thought there was the equivalent when assigning a role.

Thanks again for your help.

Was this reply helpful? Yes No