Answered

How to get all users on AAD with access to make Power Apps on any Environment?

(0) Share

Report

Posted on by leandrolopez

Hi All,

As part of governing PowerApps, I am creating a web app with resources for new users to get started. The web application does validations on behalf of the users to check if a license has been assigned to them and if they have access to any environment with and a power apps maker role assigned.

I am using the Graph API to validate the user's licenses but I can't find a way to validate if the user has access to an existent environment with the maker role assigned.

Do you know any APIs that I could use to check this? and what would be the steps? So far, I have been exploring the CDS Web API with no luck.

Appreciate your help!

Categories:

Governance & administering

I have the same question (0)

All responses (6)

Answers (2)

Sort by

Verified answer

Joel CustomerEffective 3,224 on at

Like
a
(0)

Report
Copy link

Link copied!

the recommended way to handle this is to use AAD security groups to control environment access. then it is easy to see what environments a user has access to

also, if your environment has CDS, cds roles control environment access, so it may be different in different environments.

the COE starter kit covers some of this and provides a power BI dashboard that includes what users are environment makers and what environments have the most users
https://docs.microsoft.com/en-us/power-platform/guidance/coe/power-bi-monitor

Was this reply helpful? Yes No
leandrolopez 11 on at

Like
a
(0)

Report
Copy link

Link copied!

Thanks for the quick response!

The end goal will be to use AAD security groups as you recommended but at the moment we have a mix.

I had setup the Power BI Dashboard and I was thinking on querying the entity admin_makers using the CDS Web API and use this as the list of users with effective access. Would that be a complete list? I was not sure if that represent the users that had created at least one application or if it's the complete list of people with maker access to any environment. Could you please confirm?

Thanks again!

Was this reply helpful? Yes No
Joel CustomerEffective 3,224 on at

Like
a
(0)

Report
Copy link

Link copied!

It would but you will need to query each cds environment database.

Was this reply helpful? Yes No
leandrolopez 11 on at

Like
a
(0)

Report
Copy link

Link copied!

The CoE starter Kit seems to be pulling the makers from all environment into the CDS of the environment where I deployed the started Kit components. On the PowerBI dashboard there is a tab named "Makers" that counts App Makers and Flow Makers. This is currently showing much more people that the people with access to my admin environment where I deployed the kit.

So, I if pulled the data as PowerBI is doing, wouldn't that be enough?

Was this reply helpful? Yes No
Verified answer

Joel CustomerEffective 3,224 on at

Like
a
(1)

Report
Copy link

Link copied!

Yes the COE starter kit collects information about your environments users and apps and then you can leverage it in apps and dashboards

Was this reply helpful? Yes No
leandrolopez 11 on at

Like
a
(0)

Report
Copy link

Link copied!

Thanks for the help, I have been able to get the list of makers from the admin_makers entity via the Web API using!

Have a good week and thanks again for the help.

Was this reply helpful? Yes No