Permissions or Security Roles for Running Flows from PowerApps within Managed Solutions

[Poma1]

Hi all,

We recently moved an Unmanaged solution containing a flow and an App from Deafault environment to a Managed solution in our Test environment. Since then, users are unable to run the flow and as result since the flow shall send an email, no email will be sent.
we suspect it's due to missing permissions in the Test environment, since users have no security roles assigned.
Could anyone please guide us on the specific permissions or security roles needed for users to run flows within a Managed solution?

Any help would be greatly appreciated!

regards 
Angela

What permissions or security roles are required for users to run flows having office365 connector, that are included in a managed solution from PowerApps?

[Poma1]

I have created an AD group and want to give my users in that group permission to run the flow

[Poma1]

@Pstork1 @David_MA @RezaDorrani @ManishSolanki @trice602 
🙏

[ManishSolanki]

Hi @Poma1 

Pls try the solution mentioned in the below post:

Solved: Re: connection not configured for this service - Power Platform Community (microsoft.com)

If this helps & solves your problem, please remember to give a 👍 and accept my solution as it will help others in the future.

Thanks

[Angela23]

Thanks for your response @ManishSolanki .
I have tried that solution but When I select the “Basic User” role and click “Edit”, following error appears:
"The Basic User role privileges cannot be adjusted due to its non-customizable nature"
And I can not perform this step :Click on the circle for line “Process” and column “Read” until it is a filled green circle.

Mine is greyed out. Only ‘Appand to’ is green which is to Organization. I dont know what to do 😞

[Angela23]

[Angela23]

and I'm not sure if I its correct to select 'Provided by run-only user' for connections as well? 

[ManishSolanki]

Hi @Angela23 

Pls try granting AD group the rights to run the flows.

Here are the steps:

1. Go to flow details page.

2. Scroll down to click on "Edit" link button on the right side of "Run only users":

3. Next, search the AD group email in the textbox and add it to grant the access:

Once that is setup, pls check if users are able to run the flow from the canvas app.

If this helps & solves your problem, please remember to give a 👍 and accept my solution as it will help others in the future.

Thanks

[David_MA]

I think the answer you are waiting for is what permissions are needed in an environment so user can run a flow. If so, they need to have Basic user permissions. If the flow uses approvals, they need Approvals user permission as well.

[Angela23]

@David_MA  my user has already the 'Basic user' role in the environment but its not helping. 

[Angela23]

I have now created a new security group and provided user the role called BasicUer_Copy as follwoed:

Finally my users can run the flows 🙂 But are the permissions too much for the users?

[KollyJ]

Same here... We fixed the issue by creating a new custom role and give only Read permission to Processus and Solution (Organization Level).

We also fixed the issue in another way when we have an unmanaged solution, we observe that the dependencies were lost between CanvasApp and Flow. So we remove and recreate the connection to the flow from the canvas app and then no error when executing the flow from the canvas app. And that without giving any permissions.

I think Microsoft need to fix that asap, otherwise they will spend a lot of time with support case.