cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Anonymous
Not applicable

Only Allow Users in a SharePoint Group to see certain Power App Items ($)

(changing names for simplicity on my part) If you can help me with this, I don't mind tipping for time. At all. I'm kind of in a time crunch for this project.

I have a SharePoint List where a user can be assigned to: Group A, Group B or Group C.

They should only be able to create and view SharePoint List Items for their designated Group using my power app.

 

(1) How do I filter a gallery based on the group that the logged in user belongs to? 

(2) How do I filter the drop down based on the group that the logged in user belongs to? 

 

Case examples:

I belong to Group A. I go to submit a new item. I should only be able to select Group A from the dropdown because the app knows I belong to Group A.

I belong to Group A. I want to see the Gallery filter all items submit by group A. These can be from me or my Group A Team mates.

 

On Start=

Set(varUser, User());
Set(isuserinSPGroupA, !IsBlank ( LookUp ( 'Security List', Title = "Group A")));

Set(isuserinSPGroupB, !IsBlank ( LookUp ( 'Security List', Title = "Group B")));

Set(isuserinSPGroupC, !IsBlank ( LookUp ( 'Security List', Title = "Group C")));

 

1 ACCEPTED SOLUTION

Accepted Solutions
RandyHayes
Super User
Super User

@Anonymous 

Well, the trouble with that method is that you appear to be trying to individually assign groups to list items.  

I am assuming it is just the Security list that you are doing this on!?

 

Otherwise, users in general need read access (at a minimum) to the list for the app to work.  

 

Beyond that, if you are assigning only permission to individual records and not the list itself, then you can change the initial formula to:

With({_usr: User()},
    Set(glbUserGroups,
        {GroupA: LookUp('Security List', Title="Group A", true),
         GroupB: LookUp('Security List', Title="Group B", true),
         GroupC: LookUp('Security List', Title="Group C", true)
        }
    )
)

 

As for the rest of your needs - "then when I submit my item I not only see items created by me but I also see items created by anyone else in Group A."  This is not something you will get out of the box.

As mentioned, users will Have to have read permission to the list to see anything.  Unless you are going to manually manage access on every record (that would be a challenge), they will not see anything.

 

There is an option in SharePoint for people to only see the records they create, but that is not going to help.

 

What you might want to look a little more into is the automation to break inheritance on lists.  This article describes the process pretty well.

 

Now with that said...you don't have to have a separate security list either, you can check for group membership in your app to see if a person is just part of a particular group.

 

Hopefully this is fairly clear and useful.

_____________________________________________________________________________________
Digging it? - Click on the Thumbs Up below. Solved your problem? - Click on Accept as Solution below. Others seeking the same answers will be happy you did.
NOTE: My normal response times will be Mon to Fri from 1 PM to 10 PM UTC (and lots of other times too!)
Check out my PowerApps Videos too! And, follow me on Twitter @RandyHayes

Really want to show your appreciation? Buy Me A Cup Of Coffee!

View solution in original post

15 REPLIES 15
RandyHayes
Super User
Super User

@Anonymous 

I am not seeing you account for the user in your formula to set the variables.

 

Here is what I would recommend in the OnStart:

With({_usr: User()},
    Set(glbUserGroups,
        {GroupA: LookUp('Security List', Title="Group A" && userColumn=_usr.Email, true),
         GroupB: LookUp('Security List', Title="Group B" && userColumn=_usr.Email, true),
         GroupC: LookUp('Security List', Title="Group C" && userColumn=_usr.Email, true)
        }
    )
)

 

For your Dropdown:

Filter(
    Table(
        {Value: "Group A", en: glbUserGroups.GroupA},
        {Value: "Group B", en: glbUserGroups.GroupB},
        {Value: "Group C", en: glbUserGroups.GroupC}
    ),
    en
)

 

As for the gallery...not sure what your columns are there or how you want to filter it, so if you can expand on that a little, that would help.

 

_____________________________________________________________________________________
Digging it? - Click on the Thumbs Up below. Solved your problem? - Click on Accept as Solution below. Others seeking the same answers will be happy you did.
NOTE: My normal response times will be Mon to Fri from 1 PM to 10 PM UTC (and lots of other times too!)
Check out my PowerApps Videos too! And, follow me on Twitter @RandyHayes

Really want to show your appreciation? Buy Me A Cup Of Coffee!
Anonymous
Not applicable

Hello thank you for responding so quick. I feel this will be a challenge. 

 

I should have been more specific.

 

I am using a list with Group A, Group B and Group C utilizing separate row based security I do not have a Column with a person selected next to each.


For example, if I clicked on ellipses on Group A, I use Manage Access to assign a SP Permissions Group to this Record. (image)

Highwaywoman_1-1661196563509.png

 


The reason I thought this was the best option for me, is because There will be a Group A Manager who will need to add and remove multiple people from his group only. Same for Group B and Group C.  If you have a better way to do this, I am open to changing my ways. 

See image: Group A is assigned to list item Group A. Group B to list item Group B, Respectively. 

 

Highwaywoman_0-1661196364438.png

 

 

So in summary - in case I lost you, because I kind of just lost myself right there haha:
Depending on the user, the app will know what group they belong to because of the Permissions being used in the Security List.
Say I open up the app, it knows its me, Madeline & I am with Group A so it shows me dropdown options for my group only and then when I submit my item I not only see items created by me but I also see items created by anyone else in Group A.

 

Hope this helps clear my confusion up!

RandyHayes
Super User
Super User

@Anonymous 

Well, the trouble with that method is that you appear to be trying to individually assign groups to list items.  

I am assuming it is just the Security list that you are doing this on!?

 

Otherwise, users in general need read access (at a minimum) to the list for the app to work.  

 

Beyond that, if you are assigning only permission to individual records and not the list itself, then you can change the initial formula to:

With({_usr: User()},
    Set(glbUserGroups,
        {GroupA: LookUp('Security List', Title="Group A", true),
         GroupB: LookUp('Security List', Title="Group B", true),
         GroupC: LookUp('Security List', Title="Group C", true)
        }
    )
)

 

As for the rest of your needs - "then when I submit my item I not only see items created by me but I also see items created by anyone else in Group A."  This is not something you will get out of the box.

As mentioned, users will Have to have read permission to the list to see anything.  Unless you are going to manually manage access on every record (that would be a challenge), they will not see anything.

 

There is an option in SharePoint for people to only see the records they create, but that is not going to help.

 

What you might want to look a little more into is the automation to break inheritance on lists.  This article describes the process pretty well.

 

Now with that said...you don't have to have a separate security list either, you can check for group membership in your app to see if a person is just part of a particular group.

 

Hopefully this is fairly clear and useful.

_____________________________________________________________________________________
Digging it? - Click on the Thumbs Up below. Solved your problem? - Click on Accept as Solution below. Others seeking the same answers will be happy you did.
NOTE: My normal response times will be Mon to Fri from 1 PM to 10 PM UTC (and lots of other times too!)
Check out my PowerApps Videos too! And, follow me on Twitter @RandyHayes

Really want to show your appreciation? Buy Me A Cup Of Coffee!
Anonymous
Not applicable

Hi Randy, thanks but I think I'm just burning myself out here because i'm not grasping it.

 

So do you perhaps know an easier way to on start have the app recognize which SharePoint Permission Group a person belongs in? You said i don't need to have a separate list. Which is hopeful.


"If these people are in SharePoint permission group A, filter gallery to show items only created by Group A" kind of scenario?

 

My ultimate goal is for the app to just know what permissions a person has when they start the app and filter the gallery accordingly. I can deal without the dropdown , If i can just get one win today. Like a gallery showing only item created by the people in a group.

RandyHayes
Super User
Super User

@Anonymous 

Yes...but here is the kicker - 

""If these people are in SharePoint permission group A, filter gallery to show items only created by Group A" kind of scenario?"  

When you say "Items" I assume you mean items in a separate list, not the security list.  And, we've not mentioned that one.  Is there some column or indicator in the record to determine what is group A, B or other?

_____________________________________________________________________________________
Digging it? - Click on the Thumbs Up below. Solved your problem? - Click on Accept as Solution below. Others seeking the same answers will be happy you did.
NOTE: My normal response times will be Mon to Fri from 1 PM to 10 PM UTC (and lots of other times too!)
Check out my PowerApps Videos too! And, follow me on Twitter @RandyHayes

Really want to show your appreciation? Buy Me A Cup Of Coffee!
Anonymous
Not applicable

Yes. Separate list. Correct. 

 

It's a list full of Job openings.

 

So, for example, Group A has permissions to submit applications for "HR".

Group B can submit applications for "IT" ect.

 

Every group can submit to this same list but they should only be able to see their groups' applications.  Thats why i am trying to get permissions created per Group so that way in the app they can only see applications via their Group of people.
--------------------------
On a Follow up note, I used your glbUserGroups concept. It recognizes individual names but not Selected Groups with multiple names, I know i must have missed something on my end.

Highwaywoman_0-1661201988489.png

 

 

Thanks again for everything so far. Either way, i appreciate the time spent



RandyHayes
Super User
Super User

@Anonymous 

So you're still faced with the fact that you don't have that level of control on the items in your list.

A user must have create/edit permission to create any entry.  This means that they need read access as well.  So, by default the users will see all items.

The only way to change that is to not give people access to the list (breaks app) but instead then manage permission and share with them (then the app would work but for that one item only).  

So that means that every entry someone makes would need to then be assigned permission to the appropriate group.  That would be impractical to do manually.

The article I pointed out though would do exactly that - it would break the inheritance on the item, then it would assign the person creating full control and then it would add a group to have full control as well.

This would solve the need for the list part.

 

As for the rest, well, you really don't have to deal with figuring out which group is which and what to display.  With the permissions altered from the above mentioned process, when the user goes in, they would only see what is in their group.  No need to check and alter the app...it would work the same for all users and all groups.

 

As for your follow-up - no, that formula is not meant for multiple select users.  It was based on the assumption that you were NOT using a people column in your list and that instead you were using the manage permissions action to allow only certain records to be seen.  Then, the formula would not use the person name at all because the concept is - if you can look up the record, then you obviously have permission to it and thus you are "in that group"

_____________________________________________________________________________________
Digging it? - Click on the Thumbs Up below. Solved your problem? - Click on Accept as Solution below. Others seeking the same answers will be happy you did.
NOTE: My normal response times will be Mon to Fri from 1 PM to 10 PM UTC (and lots of other times too!)
Check out my PowerApps Videos too! And, follow me on Twitter @RandyHayes

Really want to show your appreciation? Buy Me A Cup Of Coffee!
Anonymous
Not applicable

Good evening Randy, 

 

8:30 PM and I  just cant sleep without trying to fix this. 

I followed the steps in the article and it is working as directed... 'Created By' gets permissions and  'Group A' gets edit permissions as well. Now my mind is stuck at how does this bring me to the solution that I need?

 

That solution being: different groups to see different records.

Say, an item could be categorized 3 different ways. HR, IT, FrontOffice.

Case:

I create an item categorized as IT. This should be seen by Group A.

Sally Creates an item for HR, this should be seen by Group B.

Rob creates item for Front Office, this should be seen by Group C.

None of these items should be seen by other groups.

 

At this current moment, the workflow runs on every record and shares every record with the same Group once it is created/modified. How do I let he workflow know different categories of items should be shares with certain groups only?

Thanks again!! =s

RandyHayes
Super User
Super User

@Anonymous 

So this brings me back to some of the original thinking...how are you identifying the item as to what group it belongs to?  You should have (seems to me) at the very least, a Group or Department column in your record.

 

Then you would alter your PowerAutomate flow to look at that category/group and assign permission based on that.  So, if the cat/group is "IT", then it would assign the IT group permission. etc.

 

 

_____________________________________________________________________________________
Digging it? - Click on the Thumbs Up below. Solved your problem? - Click on Accept as Solution below. Others seeking the same answers will be happy you did.
NOTE: My normal response times will be Mon to Fri from 1 PM to 10 PM UTC (and lots of other times too!)
Check out my PowerApps Videos too! And, follow me on Twitter @RandyHayes

Really want to show your appreciation? Buy Me A Cup Of Coffee!

Helpful resources

Announcements

Celebrating the May Super User of the Month: Laurens Martens

  @LaurensM  is an exceptional contributor to the Power Platform Community. Super Users like Laurens inspire others through their example, encouragement, and active participation. We are excited to celebrated Laurens as our Super User of the Month for May 2024.   Consistent Engagement:  He consistently engages with the community by answering forum questions, sharing insights, and providing solutions. Laurens dedication helps other users find answers and overcome challenges.   Community Expertise: As a Super User, Laurens plays a crucial role in maintaining a knowledge sharing environment. Always ensuring a positive experience for everyone.   Leadership: He shares valuable insights on community growth, engagement, and future trends. Their contributions help shape the Power Platform Community.   Congratulations, Laurens Martens, for your outstanding work! Keep inspiring others and making a difference in the community!   Keep up the fantastic work!        

Check out the Copilot Studio Cookbook today!

We are excited to announce our new Copilot Cookbook Gallery in the Copilot Studio Community. We can't wait for you to share your expertise and your experience!    Join us for an amazing opportunity where you'll be one of the first to contribute to the Copilot Cookbook—your ultimate guide to mastering Microsoft Copilot. Whether you're seeking inspiration or grappling with a challenge while crafting apps, you probably already know that Copilot Cookbook is your reliable assistant, offering a wealth of tips and tricks at your fingertips--and we want you to add your expertise. What can you "cook" up?   Click this link to get started: https://aka.ms/CS_Copilot_Cookbook_Gallery   Don't miss out on this exclusive opportunity to be one of the first in the Community to share your app creation journey with Copilot. We'll be announcing a Cookbook Challenge very soon and want to make sure you one of the first "cooks" in the kitchen.   Don't miss your moment--start submitting in the Copilot Cookbook Gallery today!     Thank you,  Engagement Team

Announcing Power Apps Copilot Cookbook Gallery

We are excited to share that the all-new Copilot Cookbook Gallery for Power Apps is now available in the Power Apps Community, full of tips and tricks on how to best use Microsoft Copilot as you develop and create in Power Apps. The new Copilot Cookbook is your go-to resource when you need inspiration--or when you're stuck--and aren't sure how to best partner with Copilot while creating apps.   Whether you're looking for the best prompts or just want to know about responsible AI use, visit Copilot Cookbook for regular updates you can rely on--while also serving up some of your greatest tips and tricks for the Community. Check Out the new Copilot Cookbook for Power Apps today: Copilot Cookbook - Power Platform Community.  We can't wait to see what you "cook" up!      

Tuesday Tip | How to Report Spam in Our Community

It's time for another TUESDAY TIPS, your weekly connection with the most insightful tips and tricks that empower both newcomers and veterans in the Power Platform Community! Every Tuesday, we bring you a curated selection of the finest advice, distilled from the resources and tools in the Community. Whether you’re a seasoned member or just getting started, Tuesday Tips are the perfect compass guiding you across the dynamic landscape of the Power Platform Community.   As our community family expands each week, we revisit our essential tools, tips, and tricks to ensure you’re well-versed in the community’s pulse. Keep an eye on the News & Announcements for your weekly Tuesday Tips—you never know what you may learn!   Today's Tip: How to Report Spam in Our Community We strive to maintain a professional and helpful community, and part of that effort involves keeping our platform free of spam. If you encounter a post that you believe is spam, please follow these steps to report it: Locate the Post: Find the post in question within the community.Kebab Menu: Click on the "Kebab" menu | 3 Dots, on the top right of the post.Report Inappropriate Content: Select "Report Inappropriate Content" from the menu.Submit Report: Fill out any necessary details on the form and submit your report.   Our community team will review the report and take appropriate action to ensure our community remains a valuable resource for everyone.   Thank you for helping us keep the community clean and useful!

Community Roundup: A Look Back at Our Last 10 Tuesday Tips

As we continue to grow and learn together, it's important to reflect on the valuable insights we've shared. For today's #TuesdayTip, we're excited to take a moment to look back at the last 10 tips we've shared in case you missed any or want to revisit them. Thanks for your incredible support for this series--we're so glad it was able to help so many of you navigate your community experience!   Getting Started in the Community An overview of everything you need to know about navigating the community on one page!  Community Links: ○ Power Apps ○ Power Automate  ○ Power Pages  ○ Copilot Studio    Community Ranks and YOU Have you ever wondered how your fellow community members ascend the ranks within our community? We explain everything about ranks and how to achieve points so you can climb up in the rankings! Community Links: ○ Power Apps ○ Power Automate  ○ Power Pages  ○ Copilot Studio    Powering Up Your Community Profile Your Community User Profile is how the Community knows you--so it's essential that it works the way you need it to! From changing your username to updating contact information, this Knowledge Base Article is your best resource for powering up your profile. Community Links: ○ Power Apps ○ Power Automate  ○ Power Pages  ○ Copilot Studio    Community Blogs--A Great Place to Start There's so much you'll discover in the Community Blogs, and we hope you'll check them out today!  Community Links: ○ Power Apps ○ Power Automate  ○ Power Pages  ○ Copilot Studio    Unlocking Community Achievements and Earning Badges Across the Communities, you'll see badges on users profile that recognize and reward their engagement and contributions. Check out some details on Community badges--and find out more in the detailed link at the end of the article! Community Links: ○ Power Apps  ○ Power Automate  ○ Power Pages  ○ Copilot Studio    Blogging in the Community Interested in blogging? Everything you need to know on writing blogs in our four communities! Get started blogging across the Power Platform communities today! Community Links: ○ Power Apps  ○ Power Automate  ○ Power Pages  ○ Copilot Studio   Subscriptions & Notifications We don't want you to miss a thing in the community! Read all about how to subscribe to sections of our forums and how to setup your notifications! Community Links: ○ Power Apps  ○ Power Automate  ○ Power Pages  ○ Copilot Studio   Getting Started with Private Messages & Macros Do you want to enhance your communication in the Community and streamline your interactions? One of the best ways to do this is to ensure you are using Private Messaging--and the ever-handy macros that are available to you as a Community member! Community Links: ○ Power Apps  ○ Power Automate  ○ Power Pages  ○ Copilot Studio   Community User Groups Learn everything about being part of, starting, or leading a User Group in the Power Platform Community. Community Links: ○ Power Apps  ○ Power Automate  ○ Power Pages  ○ Copilot Studio   Update Your Community Profile Today! Keep your community profile up to date which is essential for staying connected and engaged with the community. Community Links: ○ Power Apps  ○ Power Automate  ○ Power Pages  ○ Copilot Studio   Thank you for being an integral part of our journey.   Here's to many more Tuesday Tips as we pave the way for a brighter, more connected future! As always, watch the News & Announcements for the next set of tips, coming soon!

Hear what's next for the Power Up Program

Hear from Principal Program Manager, Dimpi Gandhi, to discover the latest enhancements to the Microsoft #PowerUpProgram, including a new accelerated video-based curriculum crafted with the expertise of Microsoft MVPs, Rory Neary and Charlie Phipps-Bennett. If you’d like to hear what’s coming next, click the link below to sign up today! https://aka.ms/PowerUp  

Top Solution Authors
Top Kudoed Authors
Users online (4,845)