cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
dzazzo-msft
Microsoft
Microsoft

Lock down new environment

I want to create a locked down Environment for my CDS for Apps stuff - whenever I create an environment, it looks like every user in the company's AAD tenant is a valid and enabled user.  How can I create an environment that is secure by default and locked down?  Having to tab through 334 pages and disable users seems silly.

 

If it *is* secure by default, the UI certainly doesn't communicate or inspire that confidence.

1 REPLY 1
jo
Power Apps
Power Apps

Yes, your tenant's user records are sync'd down to the environments User's table in CDS automatically, but they are not actually given permission to any actions or data in the environment until you assign them a security role. The two exceptions are:

1. The user who creates the environment is automatically added to the System Administrator role

2. AAD Global Admins are automatically added to the System Adminsitrator role.

 

You can see details here for how to assign security roles: https://docs.microsoft.com/powerapps/administrator/database-security.

 

-James

Helpful resources

Announcements
PA User Group

Welcome to the User Group Public Preview

Check out new user group experience and if you are a leader please create your group

secondImage

Demo Extravaganza is Back!

We are excited to announce that Demo Extravaganza for 2021 has started!

MBAS on Demand

Microsoft Business Applications Summit sessions

On-demand access to all the great content presented by the product teams and community members! #MSBizAppsSummit #CommunityRocks

Power Apps June 2021

June Power Apps Community Call

Did you miss the call? Check out the recording here!

Users online (80,453)