user is still able to access the PROD environment canvas app even when i remove the user from the PROD environment security group

(1) Share

Report

Posted on by johnjohnPter

1,950 Season of Giving Solutions 2025

I have created a PROD environment and i defined a security group for it as follow:-

now i removed a user from the above security group, but the user is still able to access the PROD environment canvas app... i did this around 1 hour ago, any advice how i can force the user not to see the canvas app?

Thanks

Categories:

Governance & administering

I have the same question (0)

All responses (6)

Answers (0)

Sort by

AlbertoCastro 1,201 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Hi,
do you remove the user in share options from app?

Was this reply helpful? Yes No
johnjohnPter 1,950 Season of Giving Solutions 2025 on at

Like (0)

Report
Copy link

Link copied!

@AlbertoCastro no i only remove the user from the security group

Was this reply helpful? Yes No
AlbertoCastro 1,201 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

OK, and how did you share the app, to the user directly or to another group? Have you removed the user in the share options of the app?

Was this reply helpful? Yes No
johnjohnPter 1,950 Season of Giving Solutions 2025 on at

Like (0)

Report
Copy link

Link copied!

@AlbertoCastro the app is still shared with the user directly, but the user is not within the security group of the environment

Was this reply helpful? Yes No
AlbertoCastro 1,201 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Can you check if the user exists in the table users from the environment?
Go to: https://admin.powerplatform.microsoft.com/environments > Your environment > Settings > Users

Was this reply helpful? Yes No
velegandla 204 Moderator on at

Like (0)

Report
Copy link

Link copied!

@johnjohnPter

You might need to log a ticket. This seems a bug to me.

"Users running canvas apps when a security group is associated with the environment of the app must be members of the security group to be able to run the canvas app, regardless of whether the app has been shared with them. Otherwise, users will see this error message: "You can't open apps in this environment. You are not a member of the environment's security group." If your Power Platform admin has set governance details for your organization, you will see a governance contact that you may reach out to for security group membership."

https://learn.microsoft.com/en-us/power-platform/admin/control-user-access

====================================================

If I have answered your question, please mark your post as Solved.
If you like my response, please give it a Thumbs Up.

https://www.linkedin.com/in/devendravelegandla/

Was this reply helpful? Yes No