Screen Permissions and Access

[skidmarks64]

I have created a basic 3 screen app made up of a browse, detail and edit screen.

I would like to try and achieve the following:

• Make all three screens only available to certain admin users in AD
• Make the "New" element of the edit screen available to all my users in AD

Is there a formula I can put in the "visible" control of the browse and detail screens to achieve this or is there another way?

Any help much appreciated.

Regards

Ian

[Anonymous]

On top of my head I think the easiest way would be to create an app where you can add new elemests and share it with everyone in your organziation. And have the 3 screen app shared only with admins. 

[Krutish]

Hi All,

I have created one application in power apps where i want that only CEO,and CTO of the company can see the accounts page and rest other user can only see the listing. Is it possible in power apps. Can anybody guide me

[Sru]

hi @Krutish

here is the tutorial link for implemting role based security in power apps.

https://powerapps.microsoft.com/en-us/blog/implementing-role-based-permission/

Thanks,
Sru

[Shanescows]

Another way to control access is to you use If. You could make the button to open the screen only visible If(User().email = "Ceo@company.email", true, false)

If the button to get to the screen isn't visible then they can't get to it. I am about to demo this in my next video. 🙂 

Shane

[Nando]

 @Sru This is exactly the way how i make my PowerApps ready for role based security. 🙂

[Jdemke]

This is what it would look like for comparing two people's emails for visibility. If you need to add others just keep adding && "email address" to the statement. 

[Shanescows]

@skidmarks64 In this new video from minutes about 11 to 14 I show off the security trimming. Hope it helps.

Whoops. Edit to include the link. https://www.youtube.com/watch?v=5vVFgaEBYuM 

Shane

[Krutish]

Thanks for the help

[BitLord69]

I completely agree with @Anonymous, if there are enough things that are different, I'd make it into two different apps and then share each app to the correct people.

If however the changes are not that many and most screen/business logic is the same for each group of users, I'd look into using AD security groups to control which user has access to each function. As it happen, I describe how to look for group membership in this post: https://powerusers.microsoft.com/t5/General-Discussion/Is-it-possible-to-switch-the-view-as-InfoPath-in-powerapps/m-p/54604#M22624

I would not hard code e-mail addresses and such, it will just be a maintenance nightmare when users quit and new ones start.