Dynamic Row Level security for a Dataverse Table

[ezFlow]

Scenario:
- Internal staff will created Purchase Order Records in a Dataverse table, with a field to capture the Vendor and other details.
- Vendors are setup as AD guest (external) users and will login via a Model Driven App, to see their item.
How can I secure the rows so the Vendors can only see their own related records.  

[dpoggemann · Accepted solution]

Hi @ezFlow 

The primary approach I would utilize to accomplish this would be to utilize an Access Team that you can assign the vendor when they are setup in the lookup field on the record.  You can utilize a real time workflow to add the vendor to the access team dynamically.

https://docs.microsoft.com/en-us/powerapps/developer/data-platform/use-access-teams-owner-teams-coll...

https://www.azamba.com/2018/02/15/how-to-enable-access-teams-in-microsoft-dynamics-365-for-sales-crm...

[ezFlow]

Thank you for validating my thoughts. I was thinking of creating the Vendor table and have a flow assign ownership.

[dpoggemann · Accepted solution]

Hi @ezFlow,

Just a note that Access teams allow the ownership of the Purchase Orders to stay with an internal team / owner and the Access team allows you to assign the Vendor to the record with specific rights (without being the owner of the record).