Managing Certificate for each User

[HmidaFarhani]

Hello community,

     How to generate a certificate for each user using the apps ?

Best Regards 

[jlindstrom]

what do you mean by generate a certificate?

Users must be licensed for power apps and the app be shared with them.

Licensing options are per user or per app

Per app passes are managed in the power platform admin center.

[HmidaFarhani]

as security layer when each user in order to authentificate need a certificate is it ossible or no need ?

[jlindstrom]

Power Platform security is like an onion--it has layers, and it doesn't exactly work with certificates.

Every user must have a license

Every user must have apps that they are using shared with them or be the owner of the apps

Every user must have access to the environment in which the app they are using lives.

This can all be automated. AD security groups can control access to environments. If the environment doesn't have CDS, then it is managed by the O365/azure ad role, if there is CDS, then it is controlled by the cds security role associated with the user or the user's team in the case of aad security group teams.

[HmidaFarhani]

Thank you for your help .

Could you provide me if possible with some documentation for the security layer of power platform :

best Regards 

[jlindstrom]

security in common data service

https://docs.microsoft.com/en-us/power-platform/admin/security-roles-privileges

Assigning security roles 

https://docs.microsoft.com/en-us/power-platform/admin/database-security

the last link also includes instructions for managing security in environments with no common data service database

Power Platform Licensing: https://docs.microsoft.com/en-us/power-platform/admin/pricing-billing-skus

[jlindstrom]

https://docs.microsoft.com/en-us/power-platform/admin/pricing-billing-skus

Power Platform licensing

https://docs.microsoft.com/en-us/power-platform/admin/database-security

overview of user security roles, includes both environments with and without CDs databases

If users have a license and a role, they can use the platform.