cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
dave8
Post Prodigy
Post Prodigy

How to configure unique permission at entity level without impacting other entities?

Hello,

 

I have an entity called "Products" that needs unique permission for that specific entity ONLY without impacting access level of other entities.

 

Should I create new security role and update access level of all entities including "Products" entity? Or I should update the existing role ( CDS User) by updating access level of only "Products" Entity? OR there is some other way?

 

Would you please clarify the best practice/approach here?

 

Thanks and Regards,

2 ACCEPTED SOLUTIONS

Accepted Solutions
EricRegnier
Super User II
Super User II

Hi @dave8,

I usually leave the out-of-the-box (OOB) roles intact and create custom roles based on them. So I create a custom role by copying an OOB role and then make the necessary changes. Also inline with this tip: https://crmtipoftheday.com/1297/base-your-base-role-on-the-cds-user-role/

Hope this helps!

View solution in original post

Besides what I said in the tip of the day, I would look at the scope of this requirement--does it apply the same way to all users or is it different for different types of users? For example, do you have three groups that need three different levels of permissions for products? 

 

Put the minimum permission for product in the base role that all users get, then create additional roles for each other persona with different level of product access.

 

Put as much as you can in the base role, then the other roles should only contain the delta (what is different).

Remember that CDS roles are cumulative, so if you give them the base role and another role with higher permissions for products, then they get the combination of the two.

View solution in original post

2 REPLIES 2
EricRegnier
Super User II
Super User II

Hi @dave8,

I usually leave the out-of-the-box (OOB) roles intact and create custom roles based on them. So I create a custom role by copying an OOB role and then make the necessary changes. Also inline with this tip: https://crmtipoftheday.com/1297/base-your-base-role-on-the-cds-user-role/

Hope this helps!

View solution in original post

Besides what I said in the tip of the day, I would look at the scope of this requirement--does it apply the same way to all users or is it different for different types of users? For example, do you have three groups that need three different levels of permissions for products? 

 

Put the minimum permission for product in the base role that all users get, then create additional roles for each other persona with different level of product access.

 

Put as much as you can in the base role, then the other roles should only contain the delta (what is different).

Remember that CDS roles are cumulative, so if you give them the base role and another role with higher permissions for products, then they get the combination of the two.

View solution in original post

Helpful resources

Announcements
PA User Group

Welcome to the User Group Public Preview

Check out new user group experience and if you are a leader please create your group

PA Community Call

Power Apps Community Call

Next call is happening on April 21st at 8a PST.

MBAS Carousel

Sign up for our May 4th event!

May the fourth be with you, join us online!

secondImage

Experience what’s next for Power Apps

See the latest Power Apps innovations, updates, and demos from the Microsoft Business Applications Launch Event.

Users online (19,222)