cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Korni1
Frequent Visitor

Power Platform access by guest users: unexpected behavior

In our organization we wanted to try the guest sharing functionality in PowerApps and Flow, as described in the following article:

https://powerapps.microsoft.com/en-us/blog/share-canvas-apps-with-guests-in-your-organization/

 

But what we encountered a different behavior as expected, while sharing Apps to guest in our tenant.

Here is a description of our test:

  1. We added the account to our Active Directory QA Enviroment.
  2. Then we searched for the user in the sharing functionality of the specific PowerApps (QA tenant) as the original creator of the App.
  3. We launched the hyperlink as the guest user.  
  4. After authentication, we waited for few seconds for the login.
  • The background color of the app was displayed for few seconds. Afterwards we received the folowing error message. guest sharing.png

So since opening the very same App was possible with multiple other accounts on the same tenant. The App seems not to be broken, rather it seems to be there is an issue with the guest access or licensing.

Our first request here would be:

If the user did not have rights to open the app, an according error message shall be displayed.

 

We tested all this with different Accounts on different tenants with and without a license.

 

We are guessing here, but it seems like each guest needs to have a Microsoft tenant with a PowerApps and Flow license to access any other PowerApps and Flow in any other tenant, where he might be a guest.
In our opinion this limits any kind of collaboration planned with our customer, since we can’t expect guest to have a Microsoft tenant or even Licenses for PowerApps and Flow.  

 

So, is this guess correct? That means a guest needs to have a valid license on their own tenant?
Is this the expected behavior, in your point of view?

 

 

31 REPLIES 31

@Testpowerapp , @Korni1 , @abeldjilali - The remaining bug fixes have rolled out to production and are available world-wide. Please reach out if you observe any unexpected behavior. 

Hello @alaugMSFT,

I'm still experiencing the issue.

 

1. I created a guest account for a private e-mail for testing purposes.

2. I granted this account access to the PowerApp and the SharePoint Site and Libraries which the app connects to.

3. I assigned a PowerApps Plan 2 Trial license via Azure Active Directory to the account. [ <--- Does this even work? ]

4. Copied the link, logged in with the guest account to our tenant. Pasted the link.

 

Still experiencing this beaviour: 

 

Unbenannt.PNG

The app is using a Flow. So do I maybe have to assign a Flow license additionally?

Is it true that...

 

- a guest in our tenant needs to have a O365/PowerApps P1/PowerApps P2 license assigned in THEIR OWN tenant

OR

- a guest in our tenant needs to have  a O365/PowerApps P1/PowerApps P2 license assigned in OUR tenant

 

...in order to use a (standalone) app hosted at our tenant?

 

 

May this be the reason for the behaviour we're seeing with the guest opening the app?

Hi, @simb55 .

 

Whatever license is required to run the app by an internal user in the tenant must be assigned to the user in either their home or guest tenant. For instance, if the app only requires the PowerApps Included with Office license, then it's fine if the user has that license assigned in either their home or the guest tenant.  

 

Yes, assigning a license in https://portal.azure.com in the Azure Active Directory blades works. 

 

If you're available for a ~30 minute call, would you mind sending me a private message with a handful of times that you're available? 

Hello @alaugMSFT,

 

we are still investigating into this issue.

 

We cretaed a guest user for an account, that has an E5-license asigned in his own tenant and added this user to a security group. We gave this group access to both, the SharePoint site where we embedded our app and the app itself.

 

The user is now able to log into our organizations Office 365 and also to open the SharePoint site, that we gave access to.

 

When opening the app, however, an error still occurs:

"You do not have a valid Power Apps-plan. For access to Power Apps you will need a Power Apps-plan, assigend to you BY YOUR OWN ORGANIZATION or the organization that you are a guest in."

 

As mentioned above, this user hold an E5-license in his own tenant, which includes the 'PowerApps for Office 365' permissions. I do not understand, why he is not able to open the app.

Hi, @simb55 . 

 

Thanks for your message. I sent a private message requesting a bit more info. 

 

Thanks,

Austin

Hi,

Adding my 5c.

 

When inviting guest users in through the azure portal, an email is sent to the guest user. For the best experience, get the guest user to open the invitation link and sign in. Once the the guest user has signed in, they shouldn't have the unexpected behavior when opening the app.

 

So the key thing to take away here. Get the guest user to sign in first via the invitation email.

 

What's really going to bug you later is the fact that guest users cant see the app listed on their mobile devices.

simb55
Advocate II
Advocate II

Hello @Raynok1 ,

 

unfortunately, this does not work out for me.

I just tested this for our use case. Here is what I did:

 

- Created a new user in the external tenant and gave him a E5 license

- Invited the external user via our organizations Azure AD

- Logged in as the guest user to the external tenant, opened the invitation mail and klicked the link/accepted the invitation

- Gave permissions to the external user to acces the app via PowerApps -> MyApp -> Share

- Tried to open the app as the guest user

 

--> Still the same old error. >You need a PowerApps-Plan to open this app<

 

alaugMFST stated in a private message, that this would be a bug on Microsofts side and that they would be aware of it and are working on it actively.

 

Our workaround right now is, that we export an app to the tenant of the guest user(s) that we want to use our app, that includes a single Button that triggers the Launch() function OnSelect and links to our app. We advise those users, to navigate to our app this way. 

That is, because everything works just fine, once the target guest user started/built an app in his home tenant.

Okay, Process of elimination.

 

1.) Duplicate the app in the tenant hosting the app.

2.) Remove the flow connection and associated buttons, etc. 

3.) Publish the duplicated app and share it with the external user.
4.) If the problem persists then remove the SharePoint connection. Repeat step 3.
5.) If the problem persists then create a new app with no connections and complete step 3.
6.) If it works then add one connection at a time with step 3 to test.

Note for step 6, maybe its related to the security group. Instead assign the guest user directly, without the security group. 


Are you using Online SharePoint or on premise SharePoint as your app source?

 

Sorry, I know its lengthy. 

PS. Thank you for the tip, "Launch button pointing to the intended app", didn't think of that. Nice.

simb55
Advocate II
Advocate II

Hi again, thanks for your reply and effort,

 

I have done all the steps, but unfortunately it does not even work for thefreshly created, blank PowerApp.

Unless the external user opened/created an app in his own tenant first. Then it all works nice and easy.

 

 

You mentioned that they have to open a Powerapp that has a launch button that opens the external app. So technically they opened an internal Powerapp before attempting to opening the external Powerapp via the launch button. (Sounds like some AD attributes being applied in the background and we'll never know if its done first either by opening apps or when closing an app or creating an app first) 

Could even be time period between account creation and attempting to to open the external app. Is there a time to sync attributes thing in the background. Maybe your workaround fast tracks it all. The rabbit hole of note.


This would also bug me, least you have a workaround. 

Helpful resources

Announcements

Celebrating the May Super User of the Month: Laurens Martens

@LaurensM  is an exceptional contributor to the Power Platform Community. Super Users like Laurens inspire others through their example, encouragement, and active participation. We are excited to celebrated Laurens as our Super User of the Month for May 2024.   Consistent Engagement:  He consistently engages with the community by answering forum questions, sharing insights, and providing solutions. Laurens dedication helps other users find answers and overcome challenges.   Community Expertise: As a Super User, Laurens plays a crucial role in maintaining a knowledge sharing environment. Always ensuring a positive experience for everyone.   Leadership: He shares valuable insights on community growth, engagement, and future trends. Their contributions help shape the Power Platform Community.   Congratulations, Laurens Martens, for your outstanding work! Keep inspiring others and making a difference in the community!   Keep up the fantastic work!    

Check out the Copilot Studio Cookbook today!

We are excited to announce our new Copilot Cookbook Gallery in the Copilot Studio Community. We can't wait for you to share your expertise and your experience!    Join us for an amazing opportunity where you'll be one of the first to contribute to the Copilot Cookbook—your ultimate guide to mastering Microsoft Copilot. Whether you're seeking inspiration or grappling with a challenge while crafting apps, you probably already know that Copilot Cookbook is your reliable assistant, offering a wealth of tips and tricks at your fingertips--and we want you to add your expertise. What can you "cook" up?   Click this link to get started: https://aka.ms/CS_Copilot_Cookbook_Gallery   Don't miss out on this exclusive opportunity to be one of the first in the Community to share your app creation journey with Copilot. We'll be announcing a Cookbook Challenge very soon and want to make sure you one of the first "cooks" in the kitchen.   Don't miss your moment--start submitting in the Copilot Cookbook Gallery today!     Thank you,  Engagement Team

Announcing Power Apps Copilot Cookbook Gallery

We are excited to share that the all-new Copilot Cookbook Gallery for Power Apps is now available in the Power Apps Community, full of tips and tricks on how to best use Microsoft Copilot as you develop and create in Power Apps. The new Copilot Cookbook is your go-to resource when you need inspiration--or when you're stuck--and aren't sure how to best partner with Copilot while creating apps.   Whether you're looking for the best prompts or just want to know about responsible AI use, visit Copilot Cookbook for regular updates you can rely on--while also serving up some of your greatest tips and tricks for the Community. Check Out the new Copilot Cookbook for Power Apps today: Copilot Cookbook - Power Platform Community.  We can't wait to see what you "cook" up!      

Tuesday Tip | How to Report Spam in Our Community

It's time for another TUESDAY TIPS, your weekly connection with the most insightful tips and tricks that empower both newcomers and veterans in the Power Platform Community! Every Tuesday, we bring you a curated selection of the finest advice, distilled from the resources and tools in the Community. Whether you’re a seasoned member or just getting started, Tuesday Tips are the perfect compass guiding you across the dynamic landscape of the Power Platform Community.   As our community family expands each week, we revisit our essential tools, tips, and tricks to ensure you’re well-versed in the community’s pulse. Keep an eye on the News & Announcements for your weekly Tuesday Tips—you never know what you may learn!   Today's Tip: How to Report Spam in Our Community We strive to maintain a professional and helpful community, and part of that effort involves keeping our platform free of spam. If you encounter a post that you believe is spam, please follow these steps to report it: Locate the Post: Find the post in question within the community.Kebab Menu: Click on the "Kebab" menu | 3 Dots, on the top right of the post.Report Inappropriate Content: Select "Report Inappropriate Content" from the menu.Submit Report: Fill out any necessary details on the form and submit your report.   Our community team will review the report and take appropriate action to ensure our community remains a valuable resource for everyone.   Thank you for helping us keep the community clean and useful!

Hear what's next for the Power Up Program

Hear from Principal Program Manager, Dimpi Gandhi, to discover the latest enhancements to the Microsoft #PowerUpProgram, including a new accelerated video-based curriculum crafted with the expertise of Microsoft MVPs, Rory Neary and Charlie Phipps-Bennett. If you’d like to hear what’s coming next, click the link below to sign up today! https://aka.ms/PowerUp    

Welcome! Congratulations on joining the Power Pages community!

Welcome to the Power Pages Community!   You're now a part of a vibrant group of peers and industry experts who are here to network, share knowledge, and even have a little fun.     Now that you're a member, you can enjoy the following resources:   The Power Pages Community Forums The forums are also a great place to connect with other Power Pages community members. Check the News & Announcements section for community highlights, find out about the latest community news, and learn about the Community Team. Share your feedback, earn custom profile badges, enter challenges to win prizes, and more.   Community Blog Our community members have learned some excellent tips and have keen insights on the future of business analysis. Head on over to the Community Blog to read the latest posts from around the world. Let us know if you'd like to become an author and contribute your own writing — everyone is welcome.   And that’s not all, we have Galleries of additional information such as the Community Connections & How To Videos & Webinars & Video Gallery and more to motivate, educate and inspire you.   Again, welcome to the Power Pages community family, we are so happy you have joined us! Whether you are brand new to the world of data or you are a seasoned veteran - our goal is to shape the community to be your ‘go to’ for support, networking, education, inspiration and encouragement as we enjoy this adventure together! Let us know in the Community Feedback forum if you have any questions or comments about your community experience, but for now – head on over to the forums Get Help with Power Pages and dive right in!   To learn more about the community and your account be sure to visit our Community Support Area. We look forward to seeing you in the Power Pages Community!   The Power Pages Community Team  

Users online (4,679)