Hi all
Might be a stupid question but this is a really unclear topic for me.
We are currently deploying an environment strategy at our company (prod/dev/test/..)
We assign security groups to access those environments.
- However, in the microsoft docs it says that users in those security groups, also need a dataverse license in order to access the environment.
- And what about an environment strategy with only SharePoint Online based apps in our production environment? Do we need to license these users as well? This would be really strange.
- The Microsoft docs also states the following:
Control user access to environments: security groups and licenses - Power Platform | Microsoft Learn
- Does this mean that if we assign 1 per app plan license to the environment, we are covered from a license perspective?
- Is this needed in order to define our environment strategy without having to license all users? We really want to avoid the default environment but we also don't want to license everybody when not leveraging Dataverse...
And a second question, when deploying the CoE in the tenant in a dedicated environment, we are advised to not assign a security group so end users can interact with the CoE.
- Does this mean that they can access the environment and said available data connectors? We want to restrict the usage of the HTTP connector, but this is required for the CoE. Only admins will be able to use the CoE, but since we cannot specify a security access group, is this a security gap?
Thank you in advance & kind regards
Solved! Go to Solution.
Hello @NativeN,
Yes, the users you want to add to the environment need a proper license. We found the documentation to be a bit confusing/unclear, so we did some tests.
It turned out that the users could be successfully added once they had the "Common Data Service" "app" from (in our case) M365 E3 enabled:
They did not have a premium Power Apps license.
Regarding your CoE question: if you do not give users a security role to create apps etc. in the environment (e.g. by not granting the Environment Maker role), they can only consume apps and flows in this environment.
Hello @NativeN,
Yes, the users you want to add to the environment need a proper license. We found the documentation to be a bit confusing/unclear, so we did some tests.
It turned out that the users could be successfully added once they had the "Common Data Service" "app" from (in our case) M365 E3 enabled:
They did not have a premium Power Apps license.
Regarding your CoE question: if you do not give users a security role to create apps etc. in the environment (e.g. by not granting the Environment Maker role), they can only consume apps and flows in this environment.
Thanks a lot for this info.
Yes indeed quite unclear I thought so myself.
Because if this was not the case, we couldn't apply a decent environment strategy without premium licensing everybody.
Thanks a lot!
Went to look for it we don't seem to have that, and access was not possible without that extra 'license' checked?
Kind regards
Hello @NativeN,
Could you please clarify what you are missing? The "Common Data Service" checkbox for your users' licenses?
Hi @joe_hannes_col
Yup, it isn't present in our tenant..
Does this mean we need to keep working in the default environment when we are building apps based on SharePoint Online?
The ideal scenario was to create a production environment, give access through a security group, and let users access apps in that environment with their Office license, since the apps only use SharePoint online as a data source..
Because if this is not possible, that would be a big bummer..
Thank you in advance for you help
EDIT: It does seem to be present under the 'Apps' section at the license pane..
- Let's hope this works 🙂
Hello @NativeN, just to be clear: I'm not talking about the licenses (e.g. Microsoft 365 E3), but about the apps and services that are included in the license. Through the M365 Admin Center, you can enable and disable these individual apps and services, as described here.
My screenshot above refers to this subset of the E3 license.
Since your users obviously have access to SharePoint Online, chances are fairly high that they should have a license that allows them to use Power Apps. Have you checked if you can add a user from your security group individually to the environment? If they have insufficient licenses, you will receive an error message about this.
If this will not work, according to the Microsoft documentation assigning one (1) per-app pass to the environment would be considered sufficient licensing for all users you add to the environment.
Hi @joe_hannes_col
Thanks again for the swift response..
Man, this is really unclear documentation.. could have been made much easier.
and indeed:
If this will not work, according to the Microsoft documentation assigning one (1) per-app pass to the environment would be considered sufficient licensing for all users you add to the environment.
This is also stated in the documentation. But then again, this seems like something that shouldn't be allowed from a licensing perspective 😂
We'll see how it progresses.
Thanks for all you help & testing!
Let's just be honest and say the security documentation about Environments with Dataverse databases is a DISASTER. I teach Governance and I recommend NOT enabling Dataverse in an Environment if at all possible. Then one can simply use the Environment Maker/Environment Admin roles. If a Dataverse database is required because of the need to use solutions I recommend using two AD Security Groups (or M365 groups), one for Admins (with the System Administrator & System Customizer security roles) and one for Makers (with the Environment Maker role). Then if the environment DOES NOT include apps using Dataverse as a data source, you're done as long as the users have a M365/Office365 E1, E3, E5 or F2 license, all of which include Power Apps/Power Automate with standard connectors (most frequently SharePoint) as a right. Also, I don't recommend using the top-level environment Security Group because it introduces too much complication.
After all the planning and preparing, the annual Microsoft Power Platform Conference is finally here! We are excited to see so many of our community in Las Vegas this week. To help make sure you don't miss any of the workshops, sessions, and events we have planned, make sure to check out this handy Community One-Sheet, and download the pdf today! Make sure to stop by the Community Lounge to meet @hugobernier, @EricArcher, @heaher_italent, and @AshleyFelts from our team! See you in Vegas!
Join us for the first-ever the Biz Apps Community User Group meeting live from the Power Platform Conference! This one hour user group meeting is all about discovering the value and benefits of User Groups! Discover how you can find a group in your local area or about specific topics where you can learn new skills and meet like-minded people as a user group member. Hear from User Group leaders about why they do what they do and what resources they receive to help them succeed as community ambassadors. If you have never attended a User Group meeting before, this will be a great introduction! We hope you are inspired to find a group that meets your unique interests! October 5th at 2:15 pm Pacific time If you're attending #MPPC23 in Las Vegas, join us in person! Find out more here: https://powerplatformconf.com/#!/session/Biz%20Apps%20Community%20User%20Group%20Meeting%20-%20Live%20from%20MPPC/6172 Not at MPPC23? Attend vvirtually by registering here: https://aka.ms/MPPCusergroupmeeting2023 If you can't attend this meeting live, don't worry! We will record this meeting and share it with the Community at powerusers.microsoft.com
We are excited to kick off our new #TuesdayTIps series, "Back to Basics." This weekly series is our way of helping the amazing members of our community--both new members and seasoned veterans--learn and grow in how to best engage in the community! Each Tuesday, we will feature new areas of content that will help you best understand the community--from ranking and badges to profile avatars, from Super Users to blogging in the community. Our hope is that this information will help each of our community members grow in their experience with Power Platform, with the community, and with each other! This Week's Tips: Account Support: Changing Passwords, Changing Email Addresses or Usernames, "Need Admin Approval," Etc.Wondering how to get support for your community account? Check out the details on these common questions and more. Just follow the link below for articles that explain it all.Community Account Support - Power Platform Community (microsoft.com) All About GDPR: How It Affects Closing Your Community Account (And Why You Should Think Twice Before You Do)GDPR, the General Data Protection Regulation (GDPR), took effect May 25th 2018. A European privacy law, GDPR imposes new rules on companies and other organizations offering goods and services to people in the European Union (EU), or that collect and analyze data tied to EU residents. GDPR applies no matter where you are located, and it affects what happens when you decide to close your account. Read the details here:All About GDPR - Power Platform Community (microsoft.com) Getting to Know You: Setting Up Your Community Profile, Customizing Your Profile, and More.Your community profile helps other members of the community get to know you as you begin to engage and interact. Your profile is a mirror of your activity in the community. Find out how to set it up, change your avatar, adjust your time zone, and more. Click on the link below to find out how:Community Profile, Time Zone, Picture (Avatar) & D... - Power Platform Community (microsoft.com) That's it for this week. Tune in for more Tuesday Tips next Tuesday and join the community as we get "Back to Basics."
Welcome to our September 2023 Newsletter, where we highlight the latest news, product releases, podcasts, upcoming events, and the great work of our Power Platform Community members. As usual, please make sure you follow our News & Announcements in the Community to stay up to date. Another great way to connect is to join our Power Platform Community on LinkedIn. You can join our LInkedIn community here. MPPC's Got Power - Submissions end September 28th! Are you ready to showcase your skills at the Microsoft Power Platform Conference in Las Vegas? Don't miss out on the "MPPC's Got Power" talent show, a grand celebration of connection, inspiration, and shared journeys. Whether you're a technical innovator, a talented storyteller, or have a hidden creative side, we want to see what you've got! With three categories to choose from, you have the chance to shine on stage and make your mark in the Microsoft Power Platform community. Click the GIF to sign up by Thursday 28th September to be part of an unforgettable MPPC23 experience. Now is your time to shine! Check Out the Low Code Approach Podcast Give the Low Code Approach Podcast a listen! Hosted by Sean Fiene, Wendy Haddad, and Kenric Auguillard, this innovative show shines a light on how Microsoft MVPs, product team members, and Community users are building exciting solutions using Microsoft Power Platform. Plus, with guests like Kartik Kanakasabesan, April Dunnam, Ricardo Duncan Jr., Sonja Gu, Phil Topness, Shane Young and more, this weekly show is a must for all you Business Applications enthusiasts out there. Click the image below to check it out! COMMUNITY HIGHLIGHTS Check out the most active Community users for August 2023. These hardworking members are posting regularly, answering questions, writing blogs, giving kudos, and providing top solutions in their communities across Power Platform. Huge thanks to these amazing community members for their great contributions last month! trice602poweractivateLaurensMWarrenBelzAmikBCBuizerSamLedcreativeopinion timlExpiscornovusManishSolankiMattJimisonfernandosilvaMisterMarkPstork1saudali_25hafizsultan242Lucas001ragavanrajanp_doc UPCOMING EVENT: 365 EDUCON CHICAGO Whether you're new to Microsoft 365, Power Platform and SharePoint, or an experienced power user, admin or developer, 365 EduCon has content designed to fit your experience level and area of interest. Their workshops and sessions are taught by Microsoft Certified Trainers, MVPs, Regional Directors, and Engineers. Find out more and register here: Home - Microsoft 365 EduCon Chicago - A Microsoft 365 Conference.
Are you attending the Microsoft Power Platform Conference 2023 in Las Vegas? If so, we invite you to join us for the MPPC's Got Power Talent Show! Our talent show is more than a show—it's a grand celebration of connection, inspiration, and shared journeys. Through stories, skills, and collective experiences, we come together to uplift, inspire, and revel in the magic of our community's diverse talents. This year, our talent event promises to be an unforgettable experience, echoing louder and brighter than anything you've seen before. We're casting a wider net with three captivating categories: Demo Technical Solutions: Show us your Power Platform innovations, be it apps, flows, chatbots, websites or dashboards... Storytelling: Share tales of your journey with Power Platform. Hidden Talents: Unveil your creative side—be it dancing, singing, rapping, poetry, or comedy. Let your talent shine! Got That Special Spark? A Story That Demands to Be Heard? Your moment is now! 🚀 Sign up to Showcase Your Brilliance: https://aka.ms/MPPCGotPowerSignUp 🔥 Deadline for submissions: Thursday, Sept 28th How It Works: Submit this form to sign up: https://aka.ms/MPPCGotPowerSignUp We'll contact you if you're selected. Get ready to be onstage! The Spotlight is Yours: Each participant has 3-5 minutes to shine, with insightful commentary from our panel of judges. We’re not just giving you a stage; we’re handing you the platform to make your mark. Be the Story We Tell: Your talents and narratives will not just entertain but inspire, serving as the bedrock for our community’s future stories and successes. Celebration, Surprises, and Connections: As the curtain falls, the excitement continues! Await surprise awards and seize the chance to mingle with industry experts, Microsoft Power Platform leaders, and community luminaries. It's not just a show; it's an opportunity to forge connections and celebrate shared successes. Event Details: 📆 Date and Time: Wed Oct 4th, 6:30-9:00PM 📍 Location: MPPC23 at the MGM Grand, Las Vegas, NV, USA
The Reading Dynamics 365 and Power Platform User Group is a community-driven initiative that started in September 2022. It has quickly earned recognition for its enthusiastic leadership and resilience in the face of challenges. With a focus on promoting learning and networking among professionals in the Dynamics 365 and Power Platform ecosystem, the group has grown steadily and gained a reputation for its commitment to its members! The group, which had its inaugural event in January 2023 at the Microsoft UK Headquarters in Reading, has since organized three successful gatherings, including a recent social lunch. They maintain a regular schedule of four events per year, each attended by an average of 20-25 enthusiastic participants who enjoy engaging talks and, of course, pizza. The Reading User Group's presence is primarily spread through LinkedIn and Meetup, with the support of the wider community. This thriving community is managed by a dedicated team consisting of Fraser Dear, Tim Leung, and Andrew Bibby, who serves as the main point of contact for the UK Dynamics 365 and Power Platform User Groups. Andrew Bibby, an active figure in the Dynamics 365 and Power Platform community, nominated this group due to his admiration for the Reading UK User Group's efforts. He emphasized their remarkable enthusiasm and success in running the group, noting that they navigated challenges such as finding venues with resilience and smiles on their faces. Despite being a relatively new group with 20-30 members, they have managed to achieve high attendance at their meetings. The group's journey began when Fraser Dear moved to the Reading area and realized the absence of a user group catering to professionals in the Dynamics 365 and Power Platform space. He reached out to Andrew, who provided valuable guidance and support, allowing the Reading User Group to officially join the UK Dynamics 365 and Power Platform User Groups community. One of the group's notable achievements was overcoming the challenge of finding a suitable venue. Initially, their "home" was the Microsoft UK HQ in Reading. However, due to office closures, they had to seek a new location with limited time. Fortunately, a connection with Stephanie Stacey from Microsoft led them to Reading College and its Institute of Technology. The college generously offered them event space and support, forging a mutually beneficial partnership where the group promotes the Institute and encourages its members to support the next generation of IT professionals. With the dedication of its leadership team, the Reading Dynamics 365 and Power Platform User Group is poised to continue growing and thriving! Their story exemplifies the power of community-driven initiatives and the positive impact they can have on professional development and networking in the tech industry. As they move forward with their upcoming events and collaborations with Reading College, the group is likely to remain a valuable resource for professionals in the Reading area and beyond.
User | Count |
---|---|
13 | |
4 | |
2 | |
1 | |
1 |
User | Count |
---|---|
13 | |
12 | |
5 | |
4 | |
4 |