cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Eagerboy
Helper I
Helper I

Model Driven App Access Sharing & Unsharing Query

Hi everyone,

 

I understand in order to share a model driven app, we must first do these 2 things:

1. App level, assign a role.

2. Assign users to the role.

 

Here's my question, I can't seems to remove the standard roles (system administrator & system customizer) from the app level sharing, which resulting all the system administrator and system customizer able to access my model driven app. Even if I unchecked the boxes, and save it, the access is still remains there when I check back.

 

My company is using powerapps per app plan, and with this scenario, basically it used up all my per app plan unit.

 

Any idea if we can just remove the system administrator and system customizer access on app level? Thanks for help.

6 REPLIES 6
Anu_Gupta
Community Support
Community Support

You can follow the below link to customize the security role for the MDA -

https://docs.microsoft.com/en-us/powerapps/maker/model-driven-apps/share-model-driven-app#create-or-...

@Anu_Guptathanks for the reply. I do have a customized security role for the MDA.

 

My issue now is this, I cannot remove the access of system administrator or system customizer role. Seems like my MDA is stuck with these 2 roles no matter what.

 

1.png

This is same even for me in my test environment.

The role that you are showing is for the Apps (And for the App, by default - these 2 are selected) 

 

You can remove the roles when you share this to any user and remove it like below- 

 

Anu_Gupta_0-1607009209797.png

 

Sharing this will no longer keep the Sys Admin / Customizer role to the Shared user.

 

@Anu_Guptathanks for the reply. If we remove the user role as per your screenshot, won't it affect the whole environment?

 

For example, user01 supposedly to be the system administrator for this env, if we now remove the name from this MDA sharing option, I notice the user itself will no longer having system administrator role under the admin portal page. Seems like there is distinction between environment and app level on this MDA role.

@Eagerboy 

 

What @Anu_Gupta  actually said, is that the roles System Administrator and System Customizer are roles that cannot be removed because these are specific out of the box security roles that have very special meaning. What you can do as you were already advised by Anu is to create a new Security Role. When sharing the app, make sure the OOB roles are unchecked and the custom roles are checked

 

Also be sure about one more thing: that the User themselves in the underlying Environment is unassigned the OOB Roles and only assigned the custom role as well, because if not they will remain with all the full permissions anyway if you keep them assigned with System Administrator role at the User level. 

@poweractivatethanks for your reply. Yea, I get what Anu said, and I did have a custom roles.

 

I am not trying to remove the OOB roles from the environment, I wanted to unchecked it when I sharing my app (my bad, poor choice of word in earlier posts). But even though I unchecked and share, the checkbox is still ticked when I check back the access authority. I believe this is what Anu encountered also. Seems like for MDA, system administrator and system customizer roles must be selected as default authority and we cant unchecked the roles.

 

Thanks for your advice though, I think the only option now is to unassigned users' OOB roles, and create equivalence custom roles for them.

Helpful resources

Announcements

Super User of the Month | Drew Poggemann

As part of a new monthly feature in the Community, we are excited to share that Drew Poggemann is our featured Super User for the month of February 2024. If you've been in the Community for a while, we're sure Drew's name is familiar to you, as he is one of our most active contributors--he's been a Super User for five consecutive seasons!   Since authoring his first reply 5 years ago to his 514th solution authored, Drew has helped countless Community members with his insights and expertise. In addition to being a Super User, Drew is also a User Group leader and a Microsoft MVP. His contributions to our Super User sessions and to the new SUIT program are always welcome--as well as his sense of humor and fun-loving way of sharing what he knows with others.   When Drew is not solving problems and authoring solutions, he's busy overseeing the Solution Architecture team at HBS, specializing in application architecture and business solution strategy--something he's been doing for over 30 years. We are grateful for Drew and the amazing way he has used his talent and skills to help so many others in the Community. If you are part of the SUIT program, you got to hear some great tips from Drew at the first SUIT session--and we know he still has much more to share!You can find him in the Community and on LinkedIn. Thank you for all you do, Drew!

Announcing Power Apps Copilot Cookbook Gallery

We are excited to share that the all-new Copilot Cookbook Gallery for Power Apps is now available in the Power Apps Community, full of tips and tricks on how to best use Microsoft Copilot as you develop and create in Power Apps. The new Copilot Cookbook is your go-to resource when you need inspiration--or when you're stuck--and aren't sure how to best partner with Copilot while creating apps.   Whether you're looking for the best prompts or just want to know about responsible AI use, visit Copilot Cookbook for regular updates you can rely on--while also serving up some of your greatest tips and tricks for the Community. Our team will be reviewing posts using the new "Copilot Studio" label to ensure we highlight and amplify the most relevant and recent content, so you're assured of high-quality content every time you visit. If you share a post that gets featured in the curated gallery, you'll get a PM in the Community to let you know!The curated gallery is ready for you to experience now, so visit the new Copilot Cookbook for Power Apps today: Copilot Cookbook - Power Platform Community. We can't wait to see what you "cook" up!      

Celebrating a New Season of Super Users with Charles Lamanna, CVP Microsoft Business Applications

February 8 was the kickoff to the 2024 Season One Super User program for Power Platform Communities, and we are thrilled to welcome back so many returning Super Users--as well as so many brand new Super Users who started their journey last fall. Our Community Super Users are the true heroes, answering questions, providing solutions, filtering spam, and so much more. The impact they make on the Communities each day is significant, and we wanted to do something special to welcome them at our first kickoff meeting of the year.   Charles Lamanna, Microsoft CVP of Business Applications, has stressed frequently how valuable our Community is to the growth and potential of Power Platform, and we are honored to share this message from him to our 2024 Season One Super Users--as well as anyone who might be interested in joining this elite group of Community members.     If you want to know more about Super Users, check out these posts for more information today:    Power Apps: What is A Super User? - Power Platform CommunityPower Automate: What is A Super User? - Power Platform Community Copilot Studio: What is A Super User? - Power Platform Community Power Pages: What is A Super User? - Power Platform Community

February 2024 User Group Update: Welcoming New Groups and Highlighting Upcoming Events

It's a new month and a brand-new year, which means another opportunity to celebrate our amazing User Groups!Each month, we highlight the new User Groups that have joined the community. It's been a busy season for new groups, because we are thrilled to welcome 15 New User Groups! Take a look at the list below, shared by the different community categories. If your group is listed here, give this post a kudo so we can celebrate with you!   We love our User Groups and the difference they make in the lives of our Community! Thank you to all the new User Groups, new User Group leaders--we look forward to hearing about your successes and the impact you will leave!   In addition to our monthly New User Group spotlight, it's a great time to share some of the latest events happening in our User Group community! Take a look at the list below to find one that fits your schedule and need! There's a great combination of in-person and virtual events to choose from. It's a great time of year to connect and engage with User Groups both locally and online. Please Welcome Our NEW User Groups   Power Platform: Heathcare Power Platform User Group Power Platform Connect Hub Power Platform Usergroup Denmark Mexico Norte- Power Platform User Group Pune Power User Group Sudbury Power Platform User GroupMicrosoft User Group GhanaMPPBLR - Microsoft Power Platform Bengaluru User Group Power Apps:   Myrtle Beach Power Platform User GroupAnanseTechWB PowerApps Copilot Studio: Pathfinders Power Platform Community Dynamics365: Cairo, Egypt MSD 365 Business Central/NAV/F&O User GruopMS Dynamics 365 Business Central LatamCincinnati OH D365 F&O User Group February User Group Events February 2024 Cleveland Power Platform User GroupPortallunsj - Februar 2024Indiana D365/AX February User Group MeetingQ1 2024 KC Power Platform and Dynamics 365 CRM Users Group 

Super Users 2024 Season One is Here!

   We are excited to announce the first season of our 2024 Super Users is here! Our kickoff to the new year welcomes many returning Super Users and several new faces, and it's always exciting to see the impact these incredible individuals will have on the Community in 2024! We are so grateful for the daily difference they make in the Community already and know they will keep staying engaged and excited for all that will happen this year.   How to Spot a Super User in the Community:Have you ever written a post or asked for help in the Community and had it answered by a user with the Super User icon next to their name? It means you have found the actual, real-life superheroes of the Power Platform Community! Super Users are our heroes because of the way they consistently make a difference in the Community. Our amazing Super Users help keep the Community a safe place by flagging spam and letting the Community Managers know about issues. They also make the Community a great place to find answers, because they are often the first to offer solutions and get clarity on questions. Finally, Super Users share valuable insights on ways to keep the Community growing, engaging, and looking ahead!We are honored to reveal the new badges for this season of Super Users! Congratulations to all the new and returning Super Users!     To better answer the question "What is a Super User?" please check out this article: Power Apps: What is A Super User? - Power Platform CommunityPower Automate: What is A Super User? - Power Platform Community Copilot Studio: What is A Super User? - Power Platform Community Power Pages: What is A Super User? - Power Platform Community

Did You Attend the Microsoft Power Platform Conference in 2022 or 2023? Claim Your Badge Today!

If you were one of the thousands of people who joined us at the first #MPPC Microsoft Power Platform Conference in 2022 in Orlando--or attended the second-annual conference in Las Vegas in 2023--we are excited to honor you with a special community badge! Show your support for #MPPC Microsoft Power Platform Conference this year by claiming your badge!         Just follow this link to claim your badge for attending #MPPC in 2022 and/or 2023: MPPCBadgeRequest    Want to earn your badge for 2024? Just keep watching our News & Announcements for the latest updates on #MPPC24.

Top Solution Authors
Top Kudoed Authors
Users online (3,129)