Filter PowerApp Gallery if a user exists in Azure AD Group

[muzzamal]

Is it possible to filter a gallery in Power App based on the Azure AD security goup? I am currently using email addresses stored in sharepoint list column to filter the gallery. Now, I want to filter the gallery based on Ad group. How should it work? Sharepoint list name is Orders. List column that stores email addresses is called Approvers. I can store the group names or group IDs in the approvers column. If the current user exists in AD Group A, it should filter the orders where AD group A is stored for orders. If the current user exists in AD Group B, it should filter the data where AD Group B is stored for orders.

I have already assigned different screens based on the groups but unable to get an idea of how the gallery should be filtered based on the groups.

This checks if the user exists in a specific group and return true or false. If true it takes the user to a specific view otherwise the standard view.

Set(varGlobalUser,AzureAD.GetUser(User().Email).userPrincipalName); Set(varMemberAzureADGroup,!IsEmpty(AzureAD.CheckMemberGroupsV2(varGlobalUser,["AD group ID"]).value));

But couldn't build logic to apply on the power app gallery.

Thanks in advance

[JohnM86]

Yes, it is possible to filter a gallery in Power Apps based on Azure AD security groups. You can use the Azure AD connector in Power Apps to check if the current user is a member of a specific group and then filter the gallery based on the group membership.

Here's an example of how you can achieve this:

1. Create a variable to store the current user's email address:

   Set(varUserEmail, User().Email)

2. Use the Azure AD connector to get the user's object ID:

   Set(varUserObjectId, AzureAD.GetMyProfile().objectId)

3. Use the Azure AD connector to get a list of the groups that the user is a member of:

   Set(varGroupIds, AzureAD.GetGroupIdsForUser(varUserObjectId).value)

4. Create a collection that maps the group IDs to the filter conditions for the gallery:

   Clear(colGroupFilters); Collect(colGroupFilters, {GroupId: "Group A ID", FilterCondition: "Department.Value = 'Department A'"}); Collect(colGroupFilters, {GroupId: "Group B ID", FilterCondition: "Department.Value = 'Department B'"});

   Note: You will need to update the GroupId and FilterCondition values to match your specific scenario.

5. Use the Filter function to filter the gallery based on the current user's group membership:

   Filter( Orders, If( !IsBlank(varGroupIds), First( Filter( colGroupFilters, GroupId in varGroupIds ) ).FilterCondition, "" ) )

   Note: This formula checks if the user is a member of any groups, and if so, it filters the gallery based on the filter condition for the first group that matches the user's group membership. If the user is not a member of any groups, the gallery is not filtered.

I hope this helps! Let me know if you have any questions or need further assistance.

[muzzamal]

Thanks for the details.
I have created the variables onVisible property. But it shows an error that  GetMyProfile and GetGroupIdsForUser are unknown or unsupported functions.

[JohnM86]

Here's an updated example of how you can filter a gallery based on the current user's group membership:

1. Create a variable to store the current user's email address:

   Set(varUserEmail, User().Email)

2. Use the Office 365 Users connector to get a list of the groups that the user is a member of:

   Set(varGroupNames, Office365Users.UserGroups(varUserEmail).value)

3. Create a collection that maps the group names to the filter conditions for the gallery:

   Clear(colGroupFilters); Collect(colGroupFilters, {GroupName: "Group A", FilterCondition: "Department.Value = 'Department A'"}); Collect(colGroupFilters, {GroupName: "Group B", FilterCondition: "Department.Value = 'Department B'"});

   Note: You will need to update the GroupName and FilterCondition values to match your specific scenario.

4. Use the Filter function to filter the gallery based on the current user's group membership:

   Filter( Orders, If( !IsBlank(varGroupNames), First( Filter( colGroupFilters, GroupName in varGroupNames ) ).FilterCondition, "" ) )

   Note: This formula checks if the user is a member of any groups, and if so, it filters the gallery based on the filter condition for the first group that matches the user's group membership. If the user is not a member of any groups, the gallery is not filtered.

I hope this helps! Let me know if you have any questions or need further assistance.

[muzzamal]

UserGroups still shows an error.

what if we can skip the variables part as I already have this variable created. Here is the code that is working properly to navigate the user based on the group.

Set(varGlobalUser,AzureAD.GetUser(User().Email).userPrincipalName);
Set(varMemberAzureADGroup,!IsEmpty(AzureAD.CheckMemberGroupsV2(varGlobalUser,["b21b09ab-fd71-4507-b1bc-26b28c3def76"]).value));

[muzzamal]

Here is the complete details.

Basically, there are four approvers levels in the app. Currently, the user emails are stored in list columns. Approvers are selected based on the total amount.

So, the next part is, I have created Ad groups, 6 groups in total. 
The flow should be,
an order is created, total amount is 2500$. The SP list is updated with two AD group names or IDs where the approval is required. 

Once submitted,
it goes to 1st approver group, an email to group 1 is sent that it needs to be approved. The person of that group logs in to the app. Based on the condition, the user is checked if he exists in any of the 6 groups. (an idea is to save the groups IDs or names in a SP list column and check). If user exists in a group that is stored in the SP list column, the list is filtered for that group only.

When approved, the status in status column is changed and it goes to the second AD group and a member of that group 2 comes to the app and the gallery list is filtered ... and the same process as above.

so the gallery should be filtered based on the group the user belongs to (the same group name or group ID that is stored in another column of the same list)

I am sorry for this many details but this is the scenario and I am struggling with filtering based on the current user's group.

[JohnM86]

If you are unable to use the Office365Users.UserGroups function, you could consider storing the group names or IDs in a SharePoint list column and then filtering the gallery based on that column. Here's an example of how to do this:

1. Create a SharePoint list with a column to store the group names or IDs that are allowed to approve an order.

2. Add a gallery to the Power App to display the orders that need to be approved.

3. Use the Filter function to filter the orders based on the current user's group membership:

   Filter( Orders, If( IsEmpty(AllowedApproverGroups), true, AllowedApproverGroups in Split(User().Groups, ";") ) )

   This formula checks if the AllowedApproverGroups column is empty. If it is, all orders will be displayed. If it is not empty, the formula checks if the current user belongs to any of the groups listed in the AllowedApproverGroups column. If the user does belong to one of these groups, the order will be displayed.

   Note: User().Groups returns a semi-colon separated list of the user's group membership. The Split function is used to convert this into an array so it can be used in the formula.

4. Update the AllowedApproverGroups column for each order to include the names or IDs of the groups that are allowed to approve the order.

5. Test the Power App to verify that the gallery is filtered based on the current user's group membership.

[muzzamal]

I have applied this on gallery > items. SP list column has the same name but it is showing delegation warning.

[JohnM86]

the delegation warning just means it wont pull data more the 2000 rows and you will need to up the name groups to the correct column name

[muzzamal]

The gallery is still not pulling data. 😞 . The "AllowedApproverGroups" column I have created is of
"Person or Group" type and I have stored an AD group name for 3 orders but it is still not showing data.