cancel
Showing results for 
Search instead for 
Did you mean: 
Reply

Sharing: Bulk User Add

My customer gleefully came across the new Sharing PowerApps with multiple users feature, so much so that they decided to share the app I've been working on with them with a list of users in an Excel workbook.

 

To be 'safe' they added users in batches of about 50 until they received an error that PowerApps cannot be shared with more than 1000 users (see what happens when PowerUsers don't need IT to provision Azure AD Security Groups 🙄).

 

Ok so lesson learnt, they now know they should nonetheless provision AD Security Groups for apps that will be shared with more than 1000 users, and accordingly have done so today for this app.

 

The problem is that now they cannot remove those users from the app as they received an error when trying to manage access to that app through the web portal:

 

The request failed with error: 'Number of included identifiers cannot exceed '1000'. The tracking Id is 'c8fbb7bc-ecc7-47b0-8c72-9f280e30516f'.

 

Any ideas? My initial thoughts were to use PowerShell or the PowerApps Admin connectors to possible revoke access to the app, but that means my Power User needs to spend valuable time explaining why they need access to a tenant Global Admin user account because PowerApps let them do this!

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
MasterOffice365
Level: Powered On

Re: Sharing: Bulk User Add

I understand a hotfix has/is being worked on for this and rolling out, nonetheless as I needed to find a solution to this I managed to resolve this using an alternate technique which is worth sharing with the community.

 

Thankfully the Admin and Maker Connectors for PowerApps came to the rescue, and perhaps more specifically the Connector Browser tool shared on that site.  

 

Here is a breakdown of the steps I took leveraging that app:

  1. Get-AdminEnvironments
    I used this to get the object id (aka unique name) for the default environment, which was required for subsequent steps.

  2. Get-Apps
    Used to the the App Id (albeit equally this is easier enough to obtain from the web.powerapps.com site).

  3. Get-AppRoleAssignment
    Perhaps the most important step – used to obtain the complete list of what turned out to be around 1040 users who had been given CanUse access to the app, and more specifically to obtain the unique identifiers (“roleId”) for around 50 or so users, such that I could revoke access to those users in the next step.

  4. Edit-AppRoleAssignment (delete)
    Executed this function call to revoke access to the app for all the users (roleIds) obtained using the previous step Get-AppRoleAssignment function.

  5. Get-AppRoleAssignment
    After removing the users per the previous step, I reran this function to confirm there were now less than 1000 users / security groups with access to the app and as expected there were now around 990 users.

  6. Finally, I retested launching the Share app function on the web.powerapps.com site for our app and I can confirm that the users with access to the app do now appear as expected. I can also confirm I was equally thereafter able to remove access for existing users as well grant access to new users as would be expected.
3 REPLIES 3
Community Support Team
Community Support Team

Re: Sharing: Bulk User Add

Hi @Office365Master ,

 

When did you get the error? When trying to click on the "X" button on the right side of the shared users list here?

Capture.JPG

 

Maybe a screenshot could help us understand better.

 

Were you able to delete users from other PowerApps? Please have a test.

 

Regards,

Mona 

Community Support Team _ Mona Li
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Re: Sharing: Bulk User Add

Were you able to delete users from other PowerApps? Please have a test.

Yes

 

Maybe a screenshot could help us understand better.

3 screenshots attached

Screenshot 1:

No users at all are displayed, only the error message

 

Screenshot 2:

If I "add" an existing user, the existing user does display. The problem then is that if you "remove" the user, the "Share" button is still disabled so you can't save that change. Thus there is no way to remove a user.

 

Screenshot 3: 

If I run the Connector Browser app (even as a Azure Global Admin), I can get the app id, but I can't run the Get-AppRoleAssignment function against that app id because of a similar error message (per screenshot).

"If" that worked , I could run the Edit-AppRoleAssignment (delete), however I need a roleId to pass, but I can't get that because of the previous error....

 

General Info:

Tenant has 450k+ users...

App is targeting about 2500 and went live 2 days ago, as an email went out with a link to the app. Saving the app with another name (and id) isn't practical as about 200 users have already launched the app.

Highlighted
MasterOffice365
Level: Powered On

Re: Sharing: Bulk User Add

I understand a hotfix has/is being worked on for this and rolling out, nonetheless as I needed to find a solution to this I managed to resolve this using an alternate technique which is worth sharing with the community.

 

Thankfully the Admin and Maker Connectors for PowerApps came to the rescue, and perhaps more specifically the Connector Browser tool shared on that site.  

 

Here is a breakdown of the steps I took leveraging that app:

  1. Get-AdminEnvironments
    I used this to get the object id (aka unique name) for the default environment, which was required for subsequent steps.

  2. Get-Apps
    Used to the the App Id (albeit equally this is easier enough to obtain from the web.powerapps.com site).

  3. Get-AppRoleAssignment
    Perhaps the most important step – used to obtain the complete list of what turned out to be around 1040 users who had been given CanUse access to the app, and more specifically to obtain the unique identifiers (“roleId”) for around 50 or so users, such that I could revoke access to those users in the next step.

  4. Edit-AppRoleAssignment (delete)
    Executed this function call to revoke access to the app for all the users (roleIds) obtained using the previous step Get-AppRoleAssignment function.

  5. Get-AppRoleAssignment
    After removing the users per the previous step, I reran this function to confirm there were now less than 1000 users / security groups with access to the app and as expected there were now around 990 users.

  6. Finally, I retested launching the Share app function on the web.powerapps.com site for our app and I can confirm that the users with access to the app do now appear as expected. I can also confirm I was equally thereafter able to remove access for existing users as well grant access to new users as would be expected.

Helpful resources

Announcements
firstImage

Watch Sessions On Demand!

Continue your learning in our online communities.

Power Platform 2019 release wave 2 plan

Power Platform 2019 release wave 2 plan

Features releasing from October 2019 through March 2020

FirstImage

Power Platform World Tour

Coming to a city near you

thirdimage

PowerApps Community User Group Member Badge

Fill out a quick form to claim your user group badge now!

FourthImage

Join PowerApps User Group!!

Connect, share, and learn with your peers year-round

SecondImage

Power Platform Summit North America

Register by September 5 to save $200

Users Online
Currently online: 81 members 4,615 guests
Please welcome our newest community members: