Power Platform Community Forum Thread Details

Hi, I have a custom entity containing a country column with two distinct countries.

I'd like to separate the dataset in such that I give different country users access to their respective data.

I have created two business units with the country names and added users to them.

I however seem to fail in understanding how I link the custom entity to the business units, such that the data is only seen by the right users with respect to the country column.

Any help towards achieving this will be highly appreciated, am fairly new to CRM/CDS.

Categories:

Microsoft Dataverse with Power Apps

Hi @Dk4,

The business unit setup is one step to get that working. I also suggest to have a root business unit to allow for future flexibility and to have a business unit for your system admins. For example:

Root BU: Company XYZ

Child BUs: Country X, Country Y

The 2nd step is to assign the users to the right business unit. By default they are assigned to the root/default business unit. Here are the steps to change the business unit of a user: https://docs.microsoft.com/en-us/power-platform/admin/create-edit-business-units#change-the-business-unit-for-a-user

Then you need to make sure the security roles and its privileges cater for business unit scope permissions. If the privileges are currently set at the organisation level then you won't be able to segregate access. Make sure the required privileges (read, write, create, delete) are at the business unit level (the half yellow circle): https://docs.microsoft.com/en-us/power-platform/admin/wp-security-cds#entityrecord-ownership.

Lastly, you need to ensure the records your the custom entity are assigned to the right users to ensure only the users within the same BU can access/manage the right records. So for example, the records that are supposed to be "owned" by Country X should be owned by users that are member of BU Country X

Here's a nice video that explains CDS security model: https://powerusers.microsoft.com/t5/Webinars-and-Video-Gallery/Security-in-Common-Data-Service-CDS/td-p/615512