cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
noorahmad001
Frequent Visitor

Company-Employee hierarchy Powe Apps Portal

Hi Folks

 

I have a requirement to implement in Power Apps Portal. Please check the below:

 

  1. I have a "Company Products" table in Dynamics 365 and this is exposed to portal users.
  2. A company owner can signup in portal in order to add company products in this table (Company Products).
  3. How another employee of the same company can signup and become the part of the same company and have access to records.
  4. Company owner also wants some his employees to add records in this table too (Company Products).


How can we achieve this in Power Apps Portal.
Would really appreciate.
@OliverRodrigues 

8 REPLIES 8
ragavanrajan
Most Valuable Professional
Most Valuable Professional

Hi @noorahmad001 , 

 

Note: Keep in mind that if the Owner of the portal/admin of the portal should add his employee and assign to appropriate web roles. Otherwise, it would expose security risks. As you are allowing anyone to sign up when they belong to the same company. 

 

   There are few ways to achieve this. I would do with the combination of Power Automate and Portal Web roles. 

The overall idea would be when the person signup and choose a respective company you can trigger power automate and relate records to the appropriate web role. 

Steps: 

 

1. As a Owner/Admin of the portal. Create appropriate web roles with privileges 

2. Trigger Power Automate flow when the person signup for the role and relate records to the appropriate web role. 

3. Configure Web pages, entity forms according to the web role. 

 

Adding two articles to achieve what you are expecting. 

PowerApps Portals: How to Hide or Show Content based on Logged in User

https://readyxrm.blog/2019/08/26/powerapps-portals-how-to-hide-or-show-content-based-on-logged-in-us... 

 

Associate / Disassociate two entities with 1: N and N: N relationship using Relate & Unrelate records in Power Automate

https://www.inogic.com/blog/2020/02/associate-disassociate-two-entities-with-1-n-and-n-n-relationshi... 

 

Hope it helps. 

------------

If you like this post, give a Thumbs up. Where it solved your request, Mark it as a Solution to enable other users find it.

 

 

Thank you @ragavanrajan for the response and the two links are helpful but the problem still remain the same. How can I solve the delegate access problem like: A company owner and his employee being able to add/edit company owned records from the Power Apps Portal.


Fubar
Multi Super User
Multi Super User

We have one where we allow the Organization to establish their own Portal Users.  Registration is not open, and the first Organization user is manually invited to use the Portal.  Rather than create contacts and assign Web Roles themselves we give them access to make a request to create, if the request is successful a Contact is created and the appropriate Web Role assigned and a Portal Invite is sent to that new contact.  The request to create, allows us to either fully automate or stop the automation and have in internal user manually process/approve it (we don't give portal users direct access to assign web roles, they get a picklist of a couple of items and then we use a workflow to map that across to the web role to assign).

 

Your web roles need to be established with the correct entity permissions (account or parent through the relationship to an Account lookup on your Company Products record), you would need at least 3 roles - User that can manage their contact's web role assignment (we do this by a request to … and only give them a picklist to select a role from - and not a lookup to the actual web roles), another one to be able to create/edit Company Produce, and another that gives access to read.

 

ragavanrajan
Most Valuable Professional
Most Valuable Professional

Hi @noorahmad001 , 

 

      As mentioned by @Fubar, To solve the delegation problem either you do it manually or via automation via the provided links. Your web roles need to be set up properly along with the entity permissions.  Once contact is created then it is about entity permissions and web roles to access the relevant records based on the company. 

 

In the signup form. 

 

1. Add a custom field for Account / Company name. 

2. Assign an owner with full privileges for the company name. 

3. When the user / employee signup by choosing the account name 

4. The owner of that account either chooses to approve/reject that person and relate it appropriate web role ( you can do this manually or via Power automate) 

5. Then based on the web roles they only see their pages.  

 

Hope it helps. 

------------

If you like this post, give it a Thumbs up. Where it solved your request, Mark it as a Solution to enable other users to find it.

Hello yes I got it but the portals will be used by multiple companies.

 

  1. Company A
    1. User 1
    2. User 2
    3. User 3
  2. Company B 
    1. User 1
    2. User 2 

My problem is how to make this structure in Portals. One option is to add a custom field on "Contact" signup form for "Account Name" or "Account Lookup", if someone can select an existing account then associate that contact with that account and if someone doesn't selects existing account then I will create a new account record and associate the contact.

A web page will be developed which will accessible to company owner and they can approve/reject the contacts access and this can be achieved via the Web API.

@Fubar @ragavanrajan can you guys please comment on this approach.

Fubar
Multi Super User
Multi Super User

Depending on your situation, you have to think of Privacy - are you allowed to expose an Account to a person that you do not know if they belong to that Account - This is why we don't use Open registration and get a known person from the Account to request the addition of a Contact (we fully automate this, but it is an authorised person from the Account then saying add a person with this email address to be able to access our data, and this is the privileges we want them to have).

 

If you have the same Contact for multiple Accounts, then it is just a case of letting them select which Account they are creating the Product for (rather than metadata) with the appropriate entity permission setup (or providing a List View of Accounts, and on an Account record having a Subgrid for the Company Products).  And not using the default Account-Contact 1:N relationship but a N:N.

 

Ok someone from Dynamics 365 sides manages the users and their rights based upon the requirements. 

My case is different I will try to explain it again:

 

  1. Company A
    1. Company A Admin 
    2. User 1
    3. User 2
    4. User 3
  2. Company B 
    1. Company B Admin
    2. User 4
    3. User 5 

Lets say I create the Admin users (portal contact) myself and also their account and the rest of the users signup from portal. Now give an interface to Company Admin users to approve/reject the other users signed up from portal. 

 

All User 1, User 2.... should be able to see only their created records but Company Admin can see all the records, how can I achieve this.

 

Would appreciate a response.

 

Fubar
Multi Super User
Multi Super User

As per the earlier posts, you need to establish a set of relevant Entity Permissions assign them to a respective Web Role, and then assign that Web Role to the respective Portal Users.

If you are talking about a Portal User only seeing their own records then you would use an Entity Permission based on Contact Scope.  For the Admin you would have an Entity Permission based on Account Scope (or parental).  https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/assign-entity-permissions

 

We will point you in the right direction, but not provide a full set of entity permissions for your scenario as a lot more info is often required - and it can get complex depending on the precise nature of what you are trying to achieve overall.

Helpful resources

Announcements

Check out the Copilot Studio Cookbook today!

We are excited to announce our new Copilot Cookbook Gallery in the Copilot Studio Community. We can't wait for you to share your expertise and your experience!    Join us for an amazing opportunity where you'll be one of the first to contribute to the Copilot Cookbook—your ultimate guide to mastering Microsoft Copilot. Whether you're seeking inspiration or grappling with a challenge while crafting apps, you probably already know that Copilot Cookbook is your reliable assistant, offering a wealth of tips and tricks at your fingertips--and we want you to add your expertise. What can you "cook" up?   Click this link to get started: https://aka.ms/CS_Copilot_Cookbook_Gallery   Don't miss out on this exclusive opportunity to be one of the first in the Community to share your app creation journey with Copilot. We'll be announcing a Cookbook Challenge very soon and want to make sure you one of the first "cooks" in the kitchen.   Don't miss your moment--start submitting in the Copilot Cookbook Gallery today!     Thank you,  Engagement Team

Announcing Power Apps Copilot Cookbook Gallery

We are excited to share that the all-new Copilot Cookbook Gallery for Power Apps is now available in the Power Apps Community, full of tips and tricks on how to best use Microsoft Copilot as you develop and create in Power Apps. The new Copilot Cookbook is your go-to resource when you need inspiration--or when you're stuck--and aren't sure how to best partner with Copilot while creating apps.   Whether you're looking for the best prompts or just want to know about responsible AI use, visit Copilot Cookbook for regular updates you can rely on--while also serving up some of your greatest tips and tricks for the Community. Check Out the new Copilot Cookbook for Power Apps today: Copilot Cookbook - Power Platform Community.  We can't wait to see what you "cook" up!      

Tuesday Tip | How to Report Spam in Our Community

It's time for another TUESDAY TIPS, your weekly connection with the most insightful tips and tricks that empower both newcomers and veterans in the Power Platform Community! Every Tuesday, we bring you a curated selection of the finest advice, distilled from the resources and tools in the Community. Whether you’re a seasoned member or just getting started, Tuesday Tips are the perfect compass guiding you across the dynamic landscape of the Power Platform Community.   As our community family expands each week, we revisit our essential tools, tips, and tricks to ensure you’re well-versed in the community’s pulse. Keep an eye on the News & Announcements for your weekly Tuesday Tips—you never know what you may learn!   Today's Tip: How to Report Spam in Our Community We strive to maintain a professional and helpful community, and part of that effort involves keeping our platform free of spam. If you encounter a post that you believe is spam, please follow these steps to report it: Locate the Post: Find the post in question within the community.Kebab Menu: Click on the "Kebab" menu | 3 Dots, on the top right of the post.Report Inappropriate Content: Select "Report Inappropriate Content" from the menu.Submit Report: Fill out any necessary details on the form and submit your report.   Our community team will review the report and take appropriate action to ensure our community remains a valuable resource for everyone.   Thank you for helping us keep the community clean and useful!

Hear what's next for the Power Up Program

Hear from Principal Program Manager, Dimpi Gandhi, to discover the latest enhancements to the Microsoft #PowerUpProgram, including a new accelerated video-based curriculum crafted with the expertise of Microsoft MVPs, Rory Neary and Charlie Phipps-Bennett. If you’d like to hear what’s coming next, click the link below to sign up today! https://aka.ms/PowerUp    

Welcome! Congratulations on joining the Power Pages community!

Welcome to the Power Pages Community!   You're now a part of a vibrant group of peers and industry experts who are here to network, share knowledge, and even have a little fun.     Now that you're a member, you can enjoy the following resources:   The Power Pages Community Forums The forums are also a great place to connect with other Power Pages community members. Check the News & Announcements section for community highlights, find out about the latest community news, and learn about the Community Team. Share your feedback, earn custom profile badges, enter challenges to win prizes, and more.   Community Blog Our community members have learned some excellent tips and have keen insights on the future of business analysis. Head on over to the Community Blog to read the latest posts from around the world. Let us know if you'd like to become an author and contribute your own writing — everyone is welcome.   And that’s not all, we have Galleries of additional information such as the Community Connections & How To Videos & Webinars & Video Gallery and more to motivate, educate and inspire you.   Again, welcome to the Power Pages community family, we are so happy you have joined us! Whether you are brand new to the world of data or you are a seasoned veteran - our goal is to shape the community to be your ‘go to’ for support, networking, education, inspiration and encouragement as we enjoy this adventure together! Let us know in the Community Feedback forum if you have any questions or comments about your community experience, but for now – head on over to the forums Get Help with Power Pages and dive right in!   To learn more about the community and your account be sure to visit our Community Support Area. We look forward to seeing you in the Power Pages Community!   The Power Pages Community Team  

Users online (3,648)