App/Entity Access Restriction

[luc2]

Hi All,

New user to PowerApps- I have 3 separate Apps/Entities that are all part of the same Environment. I want to set restrictions around which Users can Access each App, but this doesn't seem possible through Security Roles.

Any advice hugely appreciated, thanks.

-Lucas

[haroldbk_msft]

you can specify who can access any app by how the app is shared.

https://docs.microsoft.com/en-us/powerapps/maker/canvas-apps/share-app

[ben-thompson]

@haroldbk_msft  that's for canvas apps not model driven apps.

For model driven apps the best approach is to use security roles as that would allow you to manage security in multiple different ways. (It also meant MS had far less work to do when it came to displaying what Apps a user could see and access).

My suggested approach would be to create a security role for each app, configure the app to require that security role and then add the appropriate users to each security role.

Note System Administrators will always see all Apps so if it doesn't seem to be working use a second account to confirm it works (been there and wasted 30 minutes trying to work out what I had screwed up).

[luc2]

Thanks, @ben-thompson , that's very helpful.

However, I need all users to have access to edit Forms. It seems the security privilege that grants users ability to edit forms also allows them to access all Apps (see step 11 at the link below). 

Is there any way to separate these two privileges?

https://docs.microsoft.com/en-us/powerapps/maker/model-driven-apps/share-model-driven-app