Restrict all people on a tenant to develop on the default environment

(0) Share

Report

Posted on by Pitfrog91

Hi Guys,

this issue is very important to me.

I'm now responsible for the whole governance topic on the Power Platform within my company and one idea is to block every person on our company tenant to develop on the default environment.

Idea is that if someone wants to create a PowerApps or a cloud flow he or she needs a business justification so that we can check the application if it brings value or if there is already such a solution deployed within our company to save resources.

Is this possible and if yes how?

I would really appreciate your input and help.

Best regards
Marcel

Categories:

Governance & administering

I have the same question (0)

All responses (3)

Answers (2)

Verified answer

Hamish Sheild 3,005 Most Valuable Professional on at

Like (1)

Report
Hi @Pitfrog91 ,

There is no way to block people from creating Power Platform components in the Default environment. The purpose of the Default environment is to provide a place where people can learn, experiment and create personal productivity solutions with the Power Platform.

However, to assist with your needs there are other approaches that you can take:

Make the Default environment a safe place for users to experiment by implementing DLP policies. DLP policies can be configured to stop users from creating solutions that connect to data and services that you don't want them to in the Default environment

Use Power Automate to email you newly created apps or flow each day so you can be notified of new components being create and ask for business justification - here is an example you can start from and tweak to meet your needs Get a list of new apps, Flows, and Connectors | Microsoft Power Automate

Or, you could automate the entire process, starting with the template flow above and automatically email the app or flow creator to give a business justification, start an Approval process, if not approved then delete their app or flow.

This is probably not the simple answer you want but I hope it helps. The Default environment is the way it is for a very good reason - let people create personal apps, learn and experiment - foster digital innovation within your business.

Was this reply helpful? Yes No
Verified answer

Pitfrog91 18 on at

Like (0)

Report

Hi HSheild,

thanks for your quick response. This will definetely do the trick 🙂

I'm totally with you, to let them experiment and so on. But recently we had a problem with an app that was created overseas and violated our internal policies.

Anyways, I will look into the links you've provided me.

One last question: Me, with the role "Power Platform Administrator" am I able to delete apps on every environment? Because what I can't do as an Admin is to edit the User-List for a certain environment. For example I'm not able to edit a person that has been added to an environment.

Best regards
Marcel

Was this reply helpful? Yes No
365-Assist 2,324 Moderator on at

Like (0)

Report

I reccomend installing the Centre of Excellence Starter Kit. Microsoft Power Platform Center of Excellence Kit - Power Platform | Microsoft Docs

I use it alot and have build additional Apps an Flows in it that "Control" user App building.

Was this reply helpful? Yes No