Unanswered

Create security role for PowerApps in production environment

(0) Share

Report

Posted on by h_takagai

I'm trying to control whether or not Power Apps can be developed by creating a dedicated security role.

I thought that it could be achieved by turning off the "canvas app table" creation permission of the security role.
However, it seems that PowerAutomate/PowerApps cannot be developed with "copied security roles" or "security roles created from scratch".

A copy of Environment Maker
A copy of Basic User with the same permission settings as Environment Maker
A security role with the same permission settings as Environment Maker from scratch

Copy Security Role | Environment Maker vs Copy of Environment Maker

I would be grateful if you could give me an answer or advice to the following questions.

Is this specification correct ?
Is it difficult to control whether PowerApps can be developed or not with security roles ?

Categories:

Microsoft Dataverse with Power Apps

I have the same question (0)

All responses (9)

Answers (1)

Drew Poggemann 9,287 Most Valuable Professional on at

Like (1)

Report

Hi @h_takagai ,

Please see details here on approach to control access to creating Power Apps in an environment.

https://powerusers.microsoft.com/t5/Building-Power-Apps/Restricting-users-from-creating-powerapps/td-p/81349

Was this reply helpful? Yes No
AhmedSalih 6,678 Moderator on at

Like (1)

Report

Hello, @h_takagai, when creating a custom security role for your use case, make sure that configure the customization permissions:

Note, if I want my users to only be able to use MDAs or Canvas apps only and not be able to create apps, flows, or even see the tables and other environment's objects, I made sure that all options in the customization tab are unselected. Except, if I have Business Rules for the DV tables forms, in that case you need to give access for the Process table.

If my reply helped you, please give a 👍 If it solved your issue, please give a 👍 & accept it as the Solution to help other community members find it more.

Visit my Blog: www.powerplatformplace.com

Visit my YouTube Channel: https://www.youtube.com/@powerplatformplace/videos

Was this reply helpful? Yes No
h_takagai 22 on at

Like (0)

Report

hi @AhmedSalih

What I want to do is create a security role that cannot develop PowerApps but can run shared apps.
On the other hand, a security role created by copying Environment Maker cannot perform the following actions even if custom permissions allow canvas apps and workflows.
- Development app
- Running shared apps
- Development flow
- Running shared flows

As a result, we can't create the desired security role.

Was this reply helpful? Yes No
AhmedSalih 6,678 Moderator on at

Like (0)

Report

@h_takagai, can you share a screenshot of your custom security role (customization tab) that was copied from the Environment Maker system role?

Was this reply helpful? Yes No
h_takagai 22 on at

Like (0)

Report

@AhmedSalih
Please check below.

Was this reply helpful? Yes No
AhmedSalih 6,678 Moderator on at

Like (1)

Report

@h_takagai, you are using the modern view, use the classic view. Go to make.powerapps.com and then:

Find the security Role you copied and go to the customization tab and do what I have mentioned in my replies above.

If my reply helped you, please give a 👍 If it solved your issue, please give a 👍 & accept it as the Solution to help other community members find it more.

Visit my Blog: www.powerplatformplace.com

Visit my YouTube Channel: https://www.youtube.com/@powerplatformplace/videos

Was this reply helpful? Yes No
h_takagai 22 on at

Like (0)

Report

@AhmedSalih
Thanks for showing me how to check.
Here is the new screenshot.

Was this reply helpful? Yes No
AhmedSalih 6,678 Moderator on at

Like (1)

Report

@h_takagai ,

If my reply helped you, please give a 👍 If it solved your issue, please give a 👍 & accept it as the Solution to help other community members find it more.

Visit my Blog: www.powerplatformplace.com

Visit my YouTube Channel: https://www.youtube.com/@powerplatformplace/videos

Was this reply helpful? Yes No
Verified answer

h_takagai 22 on at

Like (0)

Report

Sorry for the late reply.
I set the authority as advised, but it did not work as expected.
On the other hand, when I made an inquiry to a Microsoft engineer in parallel, it seems that it was a specification.
It behaves strangely.

Conclusion
- A security role that duplicates Environment Maker cannot develop "Power Automate" and "Power Apps".
- Creating a new security role with the same settings as Environment Maker cannot develop "Power Automate" and "Power Apps".
Your comments and advice have helped me. thank you.

Was this reply helpful? Yes No