Skip to main content

Notifications

Community site session details

Community site session details

Session Id : n1SU1NVQ2o//QndpJ1sNZd
Power Apps - Power Apps Governance and Administ...
Answered

Unlicenced user can see, edit and save some applications in the default environment

Like (0) ShareShare
ReportReport
Posted on 20 Feb 2024 23:21:31 by 661

I have been testing with an account that holds no Power licensing.

They can successfully logon to our Power platform and view the default directory (as expected).

When the user goes to Apps and selects the 'All" filter around 20 apps are displayed. They can be edited / saved and even published (as long as they don't have a connector requiring a premium license). Owners removed for privacy, but they all have one.

 

forumshelp.png

 

I am trying to figure out what criteria these apps have in common to be displaying for my unlicensed test account.

 

I ran an export from the Centre of Excellence Dashboard for PowerApps Apps (for all environments, even though I only need the default one).

blurred.jpg

 

Some of these listed apps can be found, but a majority are missing. Eg. '1st App' not listed at all. I tried looking for it by App ID, same thing.. Does anyone know where I should be looking trying to find these apps or why they would be showing for other users to edit / save in the default environment?

 

Thank you, any help is greatly appreciated.

Categories:
  • velegandla Profile Picture
    202 Super User 2025 Season 1 on 21 Feb 2024 at 22:00:55
    Re: Unlicenced user can see, edit and save some applications in the default environment

    @RandomDept 

    sorry, I read as environment admins. 

     

    Velegandla_0-1708552581759.png

    It seems model-driven apps are being given access at the org level.

     

    I will test it again with other user and update here. 

     

    ====================================================

    If I have answered your question, please mark your post as Solved.
    If you like my response, please give it a Thumbs Up.

    https://www.linkedin.com/in/devendravelegandla/ 

  • Verified answer
    RandomDept Profile Picture
    661 on 21 Feb 2024 at 21:47:00
    Re: Unlicenced user can see, edit and save some applications in the default environment

    Further to this I just found this:

    https://ideas.powerapps.com/d365community/idea/5f0cedec-ab03-494b-b8af-b0d4e59c8706

    Apparently, Environment Maker role is granted to users of the default Environment automatically, cannot be changed (at least in bulk) We have 60,000 users to manually doing so won't be an option.

  • RandomDept Profile Picture
    661 on 21 Feb 2024 at 04:26:48
    Re: Unlicenced user can see, edit and save some applications in the default environment

    Thank you so much.

     

    I removed the Environment Maker and Bot Transcript Viewer roles against the test account and now they cannot see those apps.

    I'll update the security roles for the environment.

    Inheriting someone elses setup is fun 🙂

     

    Thanks again!!

  • Verified answer
    velegandla Profile Picture
    202 Super User 2025 Season 1 on 21 Feb 2024 at 04:23:54
    Re: Unlicenced user can see, edit and save some applications in the default environment

    @RandomDept 

     

    Environment Maker role shouldn't be assigned by default. 

     

    Within the starter kit you have an option review the Security roles.

     

    Go to Environment, in this case default - Related( Power Platform user roles), check this one frequently (once in 4 weeks) and this should help in auditing the security roles assigned to users.

     

    ====================================================

    If I have answered your question, please mark your post as Solved.
    If you like my response, please give it a Thumbs Up.

    https://www.linkedin.com/in/devendravelegandla/  

  • RandomDept Profile Picture
    661 on 21 Feb 2024 at 04:19:08
    Re: Unlicenced user can see, edit and save some applications in the default environment

    Thank you,


    It appears the model driven apps listed are unfinished / never run or published applications created by users.

    The CLEANUP - Admin | Sync Template v3 (Power Apps User Shared With) flow was off, this is currently running.


    I also see that the user permissions for the default environment seems to be:

    Basic User, Bot Transcript Viewer and Environment Maker which could also help explain the results I am seeing.

    I assume removing the Environment Maker role will resolve the issue...The question is, how do I prevent this being assigned by default?

     

    Thank you again.

     

  • velegandla Profile Picture
    202 Super User 2025 Season 1 on 21 Feb 2024 at 03:04:18
    Re: Unlicenced user can see, edit and save some applications in the default environment

    @RandomDept 

    No worries 🙂

    Can you check the role assigned to user on default environment? 

     

    Velegandla_0-1708484423277.png

     

    Starter kit issue.

    Check the Model drive app inventory flows are running for you.

    This can verified via Admin command center app.

     

    Velegandla_1-1708484597561.png

    ====================================================

    If I have answered your question, please mark your post as Solved.
    If you like my response, please give it a Thumbs Up.

    https://www.linkedin.com/in/devendravelegandla/ 

     

  • RandomDept Profile Picture
    661 on 21 Feb 2024 at 02:46:06
    Re: Unlicenced user can see, edit and save some applications in the default environment

    Apologies, I should have filtered the second screenshot, was more of a 'this is where I'm getting the data from visual.'
    The second image is from the Power Platform Admin view.
    Sadly trying to find anything matching the name '1st App' or the APPID results in no hits.

    I can also confirm there are only Model driven apps listed. And I can as the user with no license save, make edits and publish.

  • velegandla Profile Picture
    202 Super User 2025 Season 1 on 21 Feb 2024 at 02:39:22
    Re: Unlicenced user can see, edit and save some applications in the default environment

    @RandomDept 

     

    In the first screenshot i see all of them are model driven apps. They need Dataverse. 

     

    Do you mean the user without license can edit Model driven apps?

     

    Second screenshot shows, SharePoint Forms. These are associated with Lists/LIbrary.

    If use got access to the lists/library (Owner permissions), they can edit the forms and it doesn't need Power Apps premium license. 

     

    Did you try filtering the app in starter kit Admin app (Power Apps view) using the app name or APPIDString? 

     

    ====================================================

    If I have answered your question, please mark your post as Solved.
    If you like my response, please give it a Thumbs Up.

    https://www.linkedin.com/in/devendravelegandla/ 

     

     

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

🌸 Community Spring Festival 2025 Challenge 🌸

WIN Power Platform Community Conference 2025 tickets!

Markus Franz – Community Spotlight

We are honored to recognize Markus Franz as our April 2025 Community…

Kudos to the March Top 10 Community Stars!

Thanks for all your good work in the Community!

Leaderboard

#1
WarrenBelz Profile Picture

WarrenBelz 146,645 Most Valuable Professional

#2
RandyHayes Profile Picture

RandyHayes 76,287 Super User 2024 Season 1

#3
Pstork1 Profile Picture

Pstork1 65,997 Most Valuable Professional

Leaderboard

Featured topics