cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Anonymous
Not applicable

Restricting users from creating powerapps

Right now we globally allow all users access to all applications. What I want is to restrict users from creating Flows and PowerApps, but still allow them to use those features.  Examples:  If I publish a PowerApp and share it with all users, I want them to be able to use the published app.  With Flows, this is where the new approval process is built, so a user needs to access their Approvals but not allowed anything else. 

 

What is possible with this and what is not? 

1 ACCEPTED SOLUTION

Accepted Solutions
Community Support Team
Community Support Team

Re: Restricting users from creating powerapps

Hi @Anonymous,

 

If you would like the user not be able to create App in the environments, then you may remove the user from the Environment Admin and the Environment Maker, only share the App (set with Can use permission) created in the Environments with the user.

Doing in this way would have those users only be able to use the App shared with them, but have no rights to create new app in the corresponding Environments.

 

For now, permission configured through the environments have two roles:

Environment Admin, Environment Maker.

Please check the Manage security for your environments part in the following article for more details:

Environments administration in PowerApps

"

The Environment Maker role can create resources within an environment including apps, connections, custom connectors, gateways, and flows using Microsoft Flow. Environment Makers can also distribute the apps they build in an environment to other users in your organization. They can share the app with individual users, security groups, or all users in the organization. For more information, seeShare an app in PowerApps.

"

 

If your company wishes to restrict the use of organizational-only data inside of Microsoft Flow, that is possible through Data loss prevention (DLP) policies.

Data loss prevention (DLP) policies

https://docs.microsoft.com/en-us/flow/prevent-data-loss

 

Any individual can try out the paid features of Microsoft Flow for 90 days, and incur no costs. However, you can fully manage the assignment of the perpetual paid licenses inside of your organization through the Office 365 admin portal.

 

For your reference:

https://docs.microsoft.com/en-us/flow/organization-q-and-a

 

Regards,

Mona

 

Community Support Team _ Mona Li
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

11 REPLIES 11
Sienna
Level 10

Re: Restricting users from creating powerapps

Good question. I also wanted to ask this

Community Support Team
Community Support Team

Re: Restricting users from creating powerapps

Hi @Anonymous,

 

If you would like the user not be able to create App in the environments, then you may remove the user from the Environment Admin and the Environment Maker, only share the App (set with Can use permission) created in the Environments with the user.

Doing in this way would have those users only be able to use the App shared with them, but have no rights to create new app in the corresponding Environments.

 

For now, permission configured through the environments have two roles:

Environment Admin, Environment Maker.

Please check the Manage security for your environments part in the following article for more details:

Environments administration in PowerApps

"

The Environment Maker role can create resources within an environment including apps, connections, custom connectors, gateways, and flows using Microsoft Flow. Environment Makers can also distribute the apps they build in an environment to other users in your organization. They can share the app with individual users, security groups, or all users in the organization. For more information, seeShare an app in PowerApps.

"

 

If your company wishes to restrict the use of organizational-only data inside of Microsoft Flow, that is possible through Data loss prevention (DLP) policies.

Data loss prevention (DLP) policies

https://docs.microsoft.com/en-us/flow/prevent-data-loss

 

Any individual can try out the paid features of Microsoft Flow for 90 days, and incur no costs. However, you can fully manage the assignment of the perpetual paid licenses inside of your organization through the Office 365 admin portal.

 

For your reference:

https://docs.microsoft.com/en-us/flow/organization-q-and-a

 

Regards,

Mona

 

Community Support Team _ Mona Li
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

geraint
Level: Powered On

Re: Restricting users from creating powerapps

This doesn't work for the Default environment though. Which is the one that gets used to customize SharePoint list forms.

 

Do you have a timeline for resolving this? 

Highlighted
Super User
Super User

Re: Restricting users from creating powerapps

I agree.  Restricting it for environments people don't have access to in the first place isn't really a restriction.  This needs to be sorted fast or enterprises won't be able to use PowerApps

Pariksheet
Level: Powered On

Re: Restricting users from creating powerapps

This is really a useless design from an enterprise perspective of course we need to have the possibility let the users use apps without providing the ability to create the apps, microsoft should introduce this feature ASAP

SimonP
Level: Powered On

Re: Restricting users from creating powerapps

This is not a solution. PowerApps still does not allow the 'all users' group to be removed from the makers role in the default environment, meaning users will always be able to create apps.

For organisations such as mine that want to manage all their apps then this is a showstopper. It means that despite the huge potential benefits of PowerApps we cannot use it!

 

Maybe Microsoft believe that this access policy promotes viral uptake of their product? But in some cases it's counter productive and prevents uptake, particularly from larger and more regulated organisations. Give us control of our environments please Microsoft.

Brad_Morgan
Level: Powered On

Re: Restricting users from creating powerapps

Can this be UNmarked as "Solved". This is preventing our enterprise from rolling out PowerApps.

AshMSport
Level: Power Up

Re: Restricting users from creating powerapps

We are using PowerApps for O365 license which comes with the default environment and does not give the option to manage security for environments. Is there any way to give users 'Can use' permission?

geraint
Level: Powered On

Re: Restricting users from creating powerapps

The last time I checked, anyone with a PowerApps licence had 'Maker' access to the default environment, which cannot be changed, as it seems to be by design. Which means that anyone in an O365 / Teams Members group will be able to customise Sharepoint list forms, except where you've broken inheritance on those lists and libraries and dropped the Groups permission down to contribute. If you're not comfortable with this, then I believe you can either remove people's licences (although they may still be able to sign-up for a trial unless you run certain powershell scripts) or start familiarising yourself with the PowerApps and Flow audit events that have just become available in the O365 Security & Compliance cnetre.

Based on the screenshot you just sent though, I would strongly suggest you setup a DLP policy to separate your business data from non-business. There should be a link earlier in the thread to explain this.

Helpful resources

Announcements
thirdimage

Power Automate Community User Group Member Badge

Fill out a quick form to claim your user group badge now!

sixthImage

Power Platform World Tour

Find out where you can attend!

Power Platform 2019 release wave 2 plan

Power Platform 2019 release wave 2 plan

Features releasing from October 2019 through March 2020

fifthimage

Microsoft Learn

Learn how to build the business apps that you need.

Top Kudoed Authors (Last 30 Days)
Users online (4,817)