cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Ancy
Kudo Kingpin
Kudo Kingpin

Access Team functionality at Hierarchy level for Dataverse Tables

Hi Everyone,
 
We have a requirement to provide access for users at record level. So we have a plan to leverage the Access Team capabilities in dataverse.
 
The admin is going to add the users(user1, user2, user3,....) into the main parent record access team grid so that the record can be accessible for these users. We want to automatically add the same users into the child -> sub child table level access team grids as well. 
 
Question:
Whether adding users on parent table record access team will automatically provide access to child -> subchild level access to records? Or should we go with custom implementation?
 
Please advise.
2 ACCEPTED SOLUTIONS

Accepted Solutions
dpoggemann
Most Valuable Professional
Most Valuable Professional

Hi @Ancy 

The "Share" cascade rule configurations for the entities come in place here for the child entities and grandchildren as well.  Please look at your cascading rules on the table and the relationship to identify how this is shared when Access Team is added to parent.

Screen Shot 2022-03-24 at 4.45.06 AM.png

Hope this helps. Please accept if answers your question or Like if helps in any way.
Thanks,
Drew

View solution in original post

Prakash4691
Solution Sage
Solution Sage

@Ancy ,

Follow as @dpoggemann mentioned also you can try setting relationship behavior to parental. It will cascade all the permission that done for parent record to child.

Main thing to check is make sure the user at least got basic/user level read privilege set to child entities or else will not be able to see any of the records.

 

If it answers your question, kindly give kudo and accept it as solution.

 

 

Regards,

Prakash

View solution in original post

11 REPLIES 11
dpoggemann
Most Valuable Professional
Most Valuable Professional

Hi @Ancy 

The "Share" cascade rule configurations for the entities come in place here for the child entities and grandchildren as well.  Please look at your cascading rules on the table and the relationship to identify how this is shared when Access Team is added to parent.

Screen Shot 2022-03-24 at 4.45.06 AM.png

Hope this helps. Please accept if answers your question or Like if helps in any way.
Thanks,
Drew
Prakash4691
Solution Sage
Solution Sage

@Ancy ,

Follow as @dpoggemann mentioned also you can try setting relationship behavior to parental. It will cascade all the permission that done for parent record to child.

Main thing to check is make sure the user at least got basic/user level read privilege set to child entities or else will not be able to see any of the records.

 

If it answers your question, kindly give kudo and accept it as solution.

 

 

Regards,

Prakash

Ancy
Kudo Kingpin
Kudo Kingpin

Hi @dpoggemann and @Prakash4691 

 

I tried with configuring the parent child relationships as both "Configurable Cascading" and "Parental". But even then the users that were added in the Access Team on parent record were not added under the Access Team on child record. Do we have any other OOB solution that I can try for this?

 

access.png

dpoggemann
Most Valuable Professional
Most Valuable Professional

Hi @Ancy ,

 

If you configured the "Share" permission in the configure cascading and you have the user on the parent record's Access Team then they should have access to the child records and it will not need to be added to the child record access team.

 

Please verify you have access to the child records with the users on the parent record access teams.

Hope this helps. Please accept if answers your question or Like if helps in any way.
Thanks,
Drew

@Ancy ,

If it is just giving access to child records when parent records gets shared with users. Make sure at least user level read privilege set for child entity in security role. Then in relationship behavior set it to parental that cascade all to child level.

 

If you don't want to make any change in security role and handle everything through access team. Then you need to use plugin to automate the process.

 

 

Regards,

Prakash

Ancy
Kudo Kingpin
Kudo Kingpin

Hi @dpoggemann and @Prakash4691 

 

I got what you are saying. Even though the users will not be added into the Access Team on child record, the child is accessible to those users who are added on parent record's Access Team. This is good at PowerApp side.

 

Since we want to display these shared records on PowerBI report as well, we were planning that it would be easier to filter only those records in PowerBI report where users who are added in the Access Team on all heirarchy level of records. i.e., if user1 is added on the Access Team on parent and all child records, then we will pull only those parent and child records on powerbi report where user1 is associated with the access team of the records on all heirarchy levels. So user1 will be able to see only these records on the powerbi report as well.

 

Can we filter only those records which are shared with any user even though they are not added on Access Team?

@Ancy ,

What do you mean by "Can we filter only those records which are shared with any user even though they are not added on Access Team?"

 

If I understand correctly, even though if user is not added to access team he needs to filter/access all records?

Ancy
Kudo Kingpin
Kudo Kingpin

Hi @Prakash4691 

 

Yes, right now suppose the user who is not added in the access team but has a shared record which was because the same user was added on the parent record's access team. So the user can access both parent and child records in powerapps.

 

Now, also I want the powerbi report to show the same parent and child records that are accessible to the same user when he browses the dashboard. So to implement such a report we had a plan to filter those parent and child records where this user was added into the access team. 

 

But now since the user is not added into the access team on child records, do we have a OOB way to filter those child records into the powerbi report which are accessible(or shared) to the user?

@Ancy ,

Sorry I am not sure about power bi. But authorizations doesn't work like in Data verse. Anyone can able to see all the records from the table which are added in the dataset.

 

Regards,

Prakash

Helpful resources

Announcements

Celebrating the May Super User of the Month: Laurens Martens

  @LaurensM  is an exceptional contributor to the Power Platform Community. Super Users like Laurens inspire others through their example, encouragement, and active participation. We are excited to celebrated Laurens as our Super User of the Month for May 2024.   Consistent Engagement:  He consistently engages with the community by answering forum questions, sharing insights, and providing solutions. Laurens dedication helps other users find answers and overcome challenges.   Community Expertise: As a Super User, Laurens plays a crucial role in maintaining a knowledge sharing environment. Always ensuring a positive experience for everyone.   Leadership: He shares valuable insights on community growth, engagement, and future trends. Their contributions help shape the Power Platform Community.   Congratulations, Laurens Martens, for your outstanding work! Keep inspiring others and making a difference in the community!   Keep up the fantastic work!        

Check out the Copilot Studio Cookbook today!

We are excited to announce our new Copilot Cookbook Gallery in the Copilot Studio Community. We can't wait for you to share your expertise and your experience!    Join us for an amazing opportunity where you'll be one of the first to contribute to the Copilot Cookbook—your ultimate guide to mastering Microsoft Copilot. Whether you're seeking inspiration or grappling with a challenge while crafting apps, you probably already know that Copilot Cookbook is your reliable assistant, offering a wealth of tips and tricks at your fingertips--and we want you to add your expertise. What can you "cook" up?   Click this link to get started: https://aka.ms/CS_Copilot_Cookbook_Gallery   Don't miss out on this exclusive opportunity to be one of the first in the Community to share your app creation journey with Copilot. We'll be announcing a Cookbook Challenge very soon and want to make sure you one of the first "cooks" in the kitchen.   Don't miss your moment--start submitting in the Copilot Cookbook Gallery today!     Thank you,  Engagement Team

Announcing Power Apps Copilot Cookbook Gallery

We are excited to share that the all-new Copilot Cookbook Gallery for Power Apps is now available in the Power Apps Community, full of tips and tricks on how to best use Microsoft Copilot as you develop and create in Power Apps. The new Copilot Cookbook is your go-to resource when you need inspiration--or when you're stuck--and aren't sure how to best partner with Copilot while creating apps.   Whether you're looking for the best prompts or just want to know about responsible AI use, visit Copilot Cookbook for regular updates you can rely on--while also serving up some of your greatest tips and tricks for the Community. Check Out the new Copilot Cookbook for Power Apps today: Copilot Cookbook - Power Platform Community.  We can't wait to see what you "cook" up!      

Tuesday Tip | How to Report Spam in Our Community

It's time for another TUESDAY TIPS, your weekly connection with the most insightful tips and tricks that empower both newcomers and veterans in the Power Platform Community! Every Tuesday, we bring you a curated selection of the finest advice, distilled from the resources and tools in the Community. Whether you’re a seasoned member or just getting started, Tuesday Tips are the perfect compass guiding you across the dynamic landscape of the Power Platform Community.   As our community family expands each week, we revisit our essential tools, tips, and tricks to ensure you’re well-versed in the community’s pulse. Keep an eye on the News & Announcements for your weekly Tuesday Tips—you never know what you may learn!   Today's Tip: How to Report Spam in Our Community We strive to maintain a professional and helpful community, and part of that effort involves keeping our platform free of spam. If you encounter a post that you believe is spam, please follow these steps to report it: Locate the Post: Find the post in question within the community.Kebab Menu: Click on the "Kebab" menu | 3 Dots, on the top right of the post.Report Inappropriate Content: Select "Report Inappropriate Content" from the menu.Submit Report: Fill out any necessary details on the form and submit your report.   Our community team will review the report and take appropriate action to ensure our community remains a valuable resource for everyone.   Thank you for helping us keep the community clean and useful!

Community Roundup: A Look Back at Our Last 10 Tuesday Tips

As we continue to grow and learn together, it's important to reflect on the valuable insights we've shared. For today's #TuesdayTip, we're excited to take a moment to look back at the last 10 tips we've shared in case you missed any or want to revisit them. Thanks for your incredible support for this series--we're so glad it was able to help so many of you navigate your community experience!   Getting Started in the Community An overview of everything you need to know about navigating the community on one page!  Community Links: ○ Power Apps ○ Power Automate  ○ Power Pages  ○ Copilot Studio    Community Ranks and YOU Have you ever wondered how your fellow community members ascend the ranks within our community? We explain everything about ranks and how to achieve points so you can climb up in the rankings! Community Links: ○ Power Apps ○ Power Automate  ○ Power Pages  ○ Copilot Studio    Powering Up Your Community Profile Your Community User Profile is how the Community knows you--so it's essential that it works the way you need it to! From changing your username to updating contact information, this Knowledge Base Article is your best resource for powering up your profile. Community Links: ○ Power Apps ○ Power Automate  ○ Power Pages  ○ Copilot Studio    Community Blogs--A Great Place to Start There's so much you'll discover in the Community Blogs, and we hope you'll check them out today!  Community Links: ○ Power Apps ○ Power Automate  ○ Power Pages  ○ Copilot Studio    Unlocking Community Achievements and Earning Badges Across the Communities, you'll see badges on users profile that recognize and reward their engagement and contributions. Check out some details on Community badges--and find out more in the detailed link at the end of the article! Community Links: ○ Power Apps  ○ Power Automate  ○ Power Pages  ○ Copilot Studio    Blogging in the Community Interested in blogging? Everything you need to know on writing blogs in our four communities! Get started blogging across the Power Platform communities today! Community Links: ○ Power Apps  ○ Power Automate  ○ Power Pages  ○ Copilot Studio   Subscriptions & Notifications We don't want you to miss a thing in the community! Read all about how to subscribe to sections of our forums and how to setup your notifications! Community Links: ○ Power Apps  ○ Power Automate  ○ Power Pages  ○ Copilot Studio   Getting Started with Private Messages & Macros Do you want to enhance your communication in the Community and streamline your interactions? One of the best ways to do this is to ensure you are using Private Messaging--and the ever-handy macros that are available to you as a Community member! Community Links: ○ Power Apps  ○ Power Automate  ○ Power Pages  ○ Copilot Studio   Community User Groups Learn everything about being part of, starting, or leading a User Group in the Power Platform Community. Community Links: ○ Power Apps  ○ Power Automate  ○ Power Pages  ○ Copilot Studio   Update Your Community Profile Today! Keep your community profile up to date which is essential for staying connected and engaged with the community. Community Links: ○ Power Apps  ○ Power Automate  ○ Power Pages  ○ Copilot Studio   Thank you for being an integral part of our journey.   Here's to many more Tuesday Tips as we pave the way for a brighter, more connected future! As always, watch the News & Announcements for the next set of tips, coming soon!

Hear what's next for the Power Up Program

Hear from Principal Program Manager, Dimpi Gandhi, to discover the latest enhancements to the Microsoft #PowerUpProgram, including a new accelerated video-based curriculum crafted with the expertise of Microsoft MVPs, Rory Neary and Charlie Phipps-Bennett. If you’d like to hear what’s coming next, click the link below to sign up today! https://aka.ms/PowerUp  

Users online (3,231)