Model Driven apps and securing attachments saved in SharePoint

[ezFlow]

Hi,

We enabled Model Driven apps to store document in SharePoint. The issue is that we use Dataverse Teams groups to assign Row level access. However, once a document is attached to the Row, it creates a sharepoint folder that is visible to users.
Is there a way of out of the box or flow to assign permission (Record Owner)  automatically to that SP folder?

Otherwise the attachments are visible to all users. who can access the SP Site.

[Mira_Ghaly · Accepted solution]

@ezFlow 

You can use powerautomate to assign permissions on SharePoint folders using Send HTTP Request action using the below article as an example of sending http requests.

https://techcommunity.microsoft.com/t5/microsoft-365-pnp-blog/how-to-use-send-an-http-request-to-sha...

And you can use the below API to assign folder permissions;

https://steveknutson.blog/2021/12/10/setting-sharepoint-permissions-with-power-automate/