User with "Basic User" role can not see any solution + can not create solutions

[johnjohn123]

I have created a new production environment >> and i added a user inside the "Basic User" role, as follow:-

and here is the diagnostic for the user on the environment:-

But when the user access the production environment >> the user got this message:-

And when the user tries to create a new solution the user got this message:-

Any advice? why the user can not see or create solutions?

Thanks

[Pstork1]

Basic users can run apps in an environment that have been shared with them. But they don't have access to non-custom entities in the environment. But they can only run them using the url that is shared with them when the app is shared.  To see or do anything with apps or solutions they will need the System customizer role.  See the chart in this documentation.

Configure user security in an environment - Power Platform | Microsoft Learn

[johnjohn123]

@Pstork1 now in my case >> i want the user to be able to Run an instant flow without the ability to modify the flow>> so inside the production environment >> i already added the user to the Run-Only section of the flow, as follow:-

but not sure how the user can run this instant flow while the user can not see the flow?

at the same time, granting the user "system customizer" will too-much for the user, as we only want the user to run a single instant flow:-

am i correct?

Thanks

[Pstork1]

When you add them as Run only user they will receive an email. The only way to run the flow as a Basic user is from the button in the email.

[johnjohn123]

@Pstork1 thanks a lot for the helpful info, yes in my case the user got an email >> access the flow and was able to run it:- 

but the user got the above  error message

so can this be overcome, so the user did not get confused when he/she see the error?

 

second question, can we grant more than "Basic User" role for this user on this flow specially? or the permissions such as "Basic User" & " "system customizer" can be granted to the whole environment only?

 

Thanks again for your very useful info

[Pstork1]

As the error message says they need prvReadSolution to look at the flow in the screen you are showing.  They are trying to look at the details of the flow, which they don't have enough privileges to do.  All they can do is run the flow, not look at the results.  To do that they'll need more privileges.  You can create a custom role that includes prvReadSolution.  But that's the only way.

The custom role would apply to the whole environment.  But Basic user and system customizer are roles not permissions.  You can create a custom role that has more permissions than Basic user and fewer than system customizer.

[johnjohn123]

@Pstork1 ok i see, but if i create a custom role that has more permissions than Basic user and fewer than system customizer, and i assigned it to the user >> then this new role will be applied to all the solutions, power apps and power automate inside the whole environment? and can not be restricted to single flow? am i correct?

[Pstork1 · Accepted solution]

That is correct.