Dataverse Team management

[LeventeH]

Hello,

I am look for a solution, that there is an application, and I want to provide acces rights for read, write and delete, for a grop of people. I got to a point that there is a Teams table built by Micrsoft and I have to fill up that table, but I don't know how.

I am open for other kind of solutions also, that does not include this Team management table. 

Any help is welcomed, and thank you in advance.

[dpoggemann · Accepted solution]

Hi @LeventeH,

If you are looking for better control of security for Dataverse then I would suggest looking at a full Dataverse environment vs. Dataverse for Teams.  With the full environment you will have fine-grained control over security roles you can assign at the user and team level and even assign to security groups in Azure Active Directory and have this map to a team in Dataverse to keep security controlled through groups in AAD.  

Some good resources:

Security Concepts in Microsoft Dataverse:  https://docs.microsoft.com/en-us/power-platform/admin/wp-security-cds

Manage Group Teams - https://docs.microsoft.com/en-us/power-platform/admin/manage-group-teams 

Hope this helps.  Please accept if answers your question or Like if helps in any way.

Thanks,

Drew

[LeventeH]

@dpoggemann 

I don't have an environment I just have a dataverse table, can I access this part

[dpoggemann]

Hi @LeventeH,

You will have to create a Sandbox environment (or production if you are not using sandbox environments).  You can create environments from the https://admin.powerplatform.com under the "Environments" in the navigation.    When you create the environment you will have the choice to create with a database, this is the dataverse so answer "Yes".   You will need Global Admin or Power Platform Administrator role to create the environment.

Note, you need to have a couple things here:

1.  You need to have at least 1 Power Apps Per App license and this will provide you with 5GB of storage at the tenant level to be able to create environments.

2.  Assign Power App Per App license to the environment (https://docs.microsoft.com/en-us/power-platform/admin/about-powerapps-perapp) 

After you create the environment with the database you can now get into the roles as defined above.

This is also going to require licensing for your users that utilize the applications outside of Office 365 licensing which can be leveraged for the Dataverse for Teams but this will give you much more control over security in the applications vs. Dataverse for Teams.

Hope this helps. 

Thanks,

Drew

[LeventeH]

@dpoggemann so what you are saying is that it's impossible to make it without an Environment? Because we want to avoid to build an environment, we have a Power App that uses Dataverse and users have to wirte data, delete data and see what is inside the table.

[dpoggemann]

Hi @LeventeH,

Please see the following documentation on Environments (https://docs.microsoft.com/en-us/power-platform/admin/environments-overview).  All tables are encapsulated in environments whether they are created in Dataverse for Teams or outside of this.  

There is a "Default" environment that exists with every tenant (https://docs.microsoft.com/en-us/power-platform/admin/environments-overview#the-default-environment) but it is really not recommended for building applications as it has a number of limitations as defined in the details.   Example comments in Microsoft documentation here on Default environment:

Hope this helps explain more.  Please accept if answers your question or Like if helps in some way.

Thanks,

Drew