
Announcements
Hello,
I have set up multiple websites under the same environment with its own set of web roles for each site. When I start creating users within this same environment and assign web roles to each of these users, they are still able to access all sites no matter what web role they belong to.
It almost seems that any user under this same environment is able to access all sites regardless of the web role they belong to. I also have removed "Anonymous Users and Administrators" access to the sites and just left the newly created web role to each one and I still can use some other web role account to access the other, no matter the site.
I however cannot use another environment's account and access any site under this one environment. Is this normal or am I missing something ? I have tried everything I can to restrict access to their individual web roles and I still can access all sites.
Any other information I can provide to help me figure this out, please let me know and I can provide. I am new to power pages and I really appreciate any help you can provide.
Thank you very much for your time.
Webroles restrict access to data, not to the portal itself. Are you using local authentication or an external identity provider?
When using an external identity provider (such as Azure B2C) you could assign specific user flows to authenticate and by doing so restricting access to other portals - as each of the flows will require it's own external identity record for the contact to access the portal.
This scenario does not work if there is a signup & signin flow - as this will automatically create the external identity record whenever a person uses their credentials to access the portal in question.
You could also look into redirecting a user if the user lacks a specific webrole for that portal.