"This user doesn't have any security roles assigned directly to them"

(1) Share

Report

Posted on by profileNameGoesHere

Hello.
I ran into a scenario when configuring security roles in a pay-as-you-go environment for users.
I created a Team of the type Microsoft Entra ID Security Group.
If I go to Team's members page on Power Platform admin center, I can see that the Entra ID group members show up as members of the Team as well.
I then added System administrator security role to this Team.
I waited about 2-3 hours and did a full incognito re-login, but the added user still doesn't have access to create a new Power Page app, which was the primary goal of assigning this access.
I opened the user's diagnostic tab in the environment and I see the following notification about "Actions required".

Yes, the user doesn't have any security roles assigned to the explicitly, but isn't the whole point of a Team to have these accesses be assigned dynamically to a group of people instead of doing it manually for each person?
Maybe someone can give me some insight as to what I should be doing differently, because this is driving me mental.

Thanks. : )

Categories:

Governance & administering

I have the same question (0)

All responses (2)

Answers (0)

Sort by

Suggested answer

cha_cha 4,932 Moderator on at

Like (0)

Report
Copy link

Link copied!
Hello,

I tried simulating your case, and I managed to make it work on my end. Here's what I did:

I ensured that the Microsoft Entra ID Security Group (the one linked to the Team) was also added as a member of the Environment Security Group in the Power Platform admin center.

Once this was done, the security role assignments propagated correctly, and the users were able to access the required features, including creating Power Pages.

Was this reply helpful? Yes No
profileNameGoesHere 30 on at

Like (0)

Report
Copy link

Link copied!

@cha_cha
Hey,
I'm going to try your method today, but for environment security group I'm using a nested EntraID security group that has the same group I use to assign security roles as its member.
If your method will work, it will mean nested groups aren't fully supported. : (

Was this reply helpful? Yes No