cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
xilef Advocate I
Advocate I

Will Flow break CDS security role priviledge?

If a user was assigned a security role that has only view priviledge on an Entity, and the user triggered a flow that will modify that Entity, will the flow fail to execute?

1 ACCEPTED SOLUTION

Accepted Solutions
Community Support
Community Support

Re: Will Flow break CDS security role priviledge?

Hi @xilef,

Based on the clarification that you provided, I think your flow would be triggered/fired well.

The "When a record is created in CDS" trigger would detect if there is new record created in your Entity A, if yes, the trigger would be fired.

Because you created this flow, the "Create a record" action in your flow would use your own connection (rather than the user's) to create corresponding record in your Entity B. In other words, the execution of "Create a record" action in your flow is based on your own CDS connection rather than the user's.

 

Best regards,

Kris

Community Support Team _ Kris Dai
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

6 REPLIES 6
Community Support
Community Support

Re: Will Flow break CDS security role priviledge?

Hi @xilef,

How do you trigger/fire the flow that you mentioned? From a Button within an app?

Do you create this flow by yourself? Or you just trigger the flow from a shared app?

I suppose that you fire/trigger the flow from an shared app, is it true?

When you fire/trigger a flow from a Button within a shared app, if you don't have edit permission to the specific CDS Entity, your flow would fail to execute.

Actually, when you run an app which includes a flow, you would be prompted to confirm or update any connections on which the flow relies. If the account you use to confirm or update the CDS connection the flow relies on does not have edit permission to the specific CDS Entity, when you fire/trigger the flow, the flow would fail to execute.

More details about sharing a flow connection within an app, please check the following article:

https://docs.microsoft.com/en-us/powerapps/maker/canvas-apps/share-app-resources#flows

 

Best regards,

Kris

Community Support Team _ Kris Dai
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
Highlighted
xilef Advocate I
Advocate I

Re: Will Flow break CDS security role priviledge?

Thanks for your reply. I have to clarify my question.

 

I have Entities A and B, my user will have create & view permissions on A but only view permission on B. And I have a flow that is triggerd by "When a record is created in CDS" monitoring the A Entity, which will then create some items on  Entity B.

Now the user creates a record in Entity A in the App. Since the flow is triggered by the creation of record in A, there is no directly connection between the App and Flow. Will this flow then successfully create some items on Entity B?

Community Support
Community Support

Re: Will Flow break CDS security role priviledge?

Duplicated

Community Support Team _ Kris Dai
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
xilef Advocate I
Advocate I

Re: Will Flow break CDS security role priviledge?

This seems like relavent to another question?

Community Support
Community Support

Re: Will Flow break CDS security role priviledge?

Hi @xilef,

Based on the clarification that you provided, I think your flow would be triggered/fired well.

The "When a record is created in CDS" trigger would detect if there is new record created in your Entity A, if yes, the trigger would be fired.

Because you created this flow, the "Create a record" action in your flow would use your own connection (rather than the user's) to create corresponding record in your Entity B. In other words, the execution of "Create a record" action in your flow is based on your own CDS connection rather than the user's.

 

Best regards,

Kris

Community Support Team _ Kris Dai
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

xilef Advocate I
Advocate I

Re: Will Flow break CDS security role priviledge?

In this case, the flow will be counted as run by me, not by the user who created the record in Entity A, is it correct?

Helpful resources

Announcements
MBAS Gallery 2020

MBAS Gallery 2020

Watch Microsoft Business Applications Summit sessions on-demand.

firstImage

New Ranks and Rank Icons released on April 21!

The time has come: We are finally able to share more details on the brand-new ranks coming to the Power Apps Community!

Top Solution Authors
Top Kudoed Authors
Users online (6,703)