Who can share Model driven app with other user?

[dave8]

Hello,

I have an app called "App1" that is shared with security role "SR1" 

Then, I have shared an app with "User1" by assigning "SR1"

However, when "User1" shares an app with other user by assigning "SR1", it throws following error:

Cannot return null for non-nullable field FailedRoleError.code.

While MS Doc says that to share an app, user need a permission assigned to that app, which is the case for User1 in this scenario, then why "User1" is unable to share an app with other user?

Who can share Model driven app with other user?

Thanks,

[dave8]

Yeah, I can see the roles in the dropdown and I have definitely made sure that role is selected before I share, however after clicking on "Share" page loads again and throws error message and removes security role selection.

"System Administrator" is able to share an app with obvious reason.

Any other clue? Are you experiencing the same error?

Thanks,

[EricRegnier]

Hi @dave8 , apologies for late reply. I tried multiple ways to reproduce this error and can't. A few other things to try if you haven't already:

1. Double check that they have Environment Maker and Common Data Service User role assigned. Environment Maker should already get auto assigned by the system (if CDS is in the Default env) when the licensed user logs in to make.powerapps.com
2. Ensure you users have the Security Role entity read access including Append To privileges. They should get that privilege already assigned from the Environment Maker and Common Data Service User roles.
3. Can be a product issue, submit a Microsoft Support Ticket at https://admin.powerplatform.microsoft.com/support

@jlindstrom maybe you have an idea?

[dave8]

Hi @EricRegnier 

Thanks to update, I assure that "CDS Role" is assigned, however I have not assigned "Environment Maker" role as this role allows user to create application which I do not want.

I require a role, that only allows user to share an app where he/she has an access without having an access of creating a new app.

Thanks and Regards,

[EricRegnier]

Thanks for clarifying and now I was able to finally reproduce 🙂 Essentially, the privileges required are the privileges to assign security roles users. So here they are with an important note:

• "Write" and "Append To" to User entity under Business Management tab
• "Append To" and "Assign" to Security Role entity (user - role membership is an N:N relationship) under Business Management tab

Important: The current user assigning the role must also already have all the privileges that role about to be assigned has.

[dave8]

Hi @EricRegnier 

Thank you for the further details, however unfortunately even if I assign Org level permission to all operations on Security Role and User entity as below, it still throws the same error:

Did the changes really worked for you?

Thanks,

[EricRegnier]

but is the user trying to assign a role with privileges they don’t have? If so that’s your issue. For example, you can’t assign System Admin role if you do not have System Admin role  (or a custom role with all privileges at org level)

[EricRegnier]

Hi @dave8, where you able to resolve this and find the missing privilege(s) of the user trying to assign the role? cheers 

[dave8]

Hi @EricRegnier 

but is the user trying to assign a role with privileges they don’t have? If so that’s your issue. For example, you can’t assign System Admin role if you do not have System Admin role (or a custom role with all privileges at org level) - Yes, I am aware of that, I was not performing this

Issue still exist, and therefore in discussion with MS support, they are seeing the same concern as I do, and they are in process of resolving it.

I am unsure if this is a bug in CDS or there is an issue with the CDS environment.

Thanks,