cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
ajhstn
Level: Powered On

Authorization to Azure resources for PowerApps

Hey - we build powerapps ontop of flows that call back to Azure Automation runbooks to do stuff.

 

Whats the best way to "share" these apps with L1 helpdesk crew.  Example.  After i share a powerapp with another person, they can see and run the powerapp, but the app fails because their account doesn't have the authorization to run the underlying runbook.

 

I can get around this by assigning them the "Automation Job Operator" Azure Role, however this Role allows members to run all runbooks in the account, which is not what we need.  We need to lock powerapps down to users and runbooks down to users.. possibles?

1 ACCEPTED SOLUTION

Accepted Solutions
Community Support Team
Community Support Team

Re: Authorization to Azure resources for PowerApps

Hi @ajhstn ,

I'm afraid there's no permission about editing one specific runbook.

Here's a doc about Azure Automations role for your reference:

https://docs.microsoft.com/en-us/azure/automation/automation-role-based-access-control

If you want the shared user use your app, you need to assign him the permission of the data source.

I suggest you first assigh users with the permission of "Automation Job Operator" role, then limit them only view or edit one spefic runbook.

For example, try this formula:

If(Not(User().Email in adminlist.Email)),Filter(......))

 

 

Best regards,

Community Support Team _ Phoebe Liu

Community Support Team _ Phoebe Liu
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
3 REPLIES 3
Super User
Super User

Re: Authorization to Azure resources for PowerApps

Hi @ajhstn 

 

How are you identifying that a specified user is allowed to see only certain runbooks? Do you have a list or some data source that associated users to the runbooks? If yes, we can use that list and show only specific runbooks in the canvas app and based on selected runbook name, flow can be triggered. Please share the specifics of your implemetation, so that we can help you better.
 
Hope this Helps!

If this reply has answered your question or solved your issue, please mark this question as answered. Answered questions helps users in the future who may have the same issue or question quickly find a resolution via search. If you liked my response, please consider giving it a thumbs up. THANKS!
Highlighted
ajhstn
Level: Powered On

Re: Authorization to Azure resources for PowerApps

We are in Office365.  I create runbooks in Azure Automations, then add a powerapp and flow on top of them.  The flow contains the "Create Job" action.  When i share the powerapp to users, they can see the power app and use the app, but the flow fails, because the user doesnt have permissions to execute "Microsoft.Automation/automationAccounts/jobs/write", ie they dont have permission to execute the "Create Job" action.  When i give the user the "Automation Job Operator" role then they can use the powerapp successfully.

 

I'd prefer NOT to give my users the "Automation Job Operator" role.  Similarly, if i build an app for an org wide audience, i don't want to give this role to everyone.

 

Ideas?

Community Support Team
Community Support Team

Re: Authorization to Azure resources for PowerApps

Hi @ajhstn ,

I'm afraid there's no permission about editing one specific runbook.

Here's a doc about Azure Automations role for your reference:

https://docs.microsoft.com/en-us/azure/automation/automation-role-based-access-control

If you want the shared user use your app, you need to assign him the permission of the data source.

I suggest you first assigh users with the permission of "Automation Job Operator" role, then limit them only view or edit one spefic runbook.

For example, try this formula:

If(Not(User().Email in adminlist.Email)),Filter(......))

 

 

Best regards,

Community Support Team _ Phoebe Liu

Community Support Team _ Phoebe Liu
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Helpful resources

Announcements
firstImage

Watch Sessions On Demand!

Continue your learning in our online communities.

Power Platform 2019 release wave 2 plan

Power Platform 2019 release wave 2 plan

Features releasing from October 2019 through March 2020

FirstImage

Power Platform World Tour

Coming to a city near you

thirdimage

PowerApps Community User Group Member Badge

Fill out a quick form to claim your user group badge now!

FourthImage

Join PowerApps User Group!!

Connect, share, and learn with your peers year-round

SecondImage

Power Platform Summit North America

Register by September 5 to save $200

Top Kudoed Authors
Users Online
Currently online: 216 members 4,703 guests
Please welcome our newest community members: