How to control app and Dataverse access

[BradonK]

Hi all,

I was wondering if someone could give me some pointers on how access works with Power Apps?

Let's say I have an app in a solution on a production environment. I want only a few people in my org to have access to this app.

I assume this is done by finding the app in question, pressing Share and adding the relevant people?

If so, does this mean only those people will also have access to the Dataverse database in that solution, or is there another set of settings for who can access this data?

Ideally, the data would only be available through the app and no one should be able to view the raw data directly on Power Apps Studio unless they are a developer. Is this possible?

Thanks

[Ethan_R]

Hi @BradonK ,

For Model-driven app, you can assign security roles for certain application that can be assigned to those users who can have access to this:

Hope this helps

[ShaheerAhmad · Accepted solution]

To control app and Dataverse access in Power Apps, you can follow these steps:

1. App Access Control:
- Open the Power Apps Studio or navigate to the Power Apps portal.
- Locate the app you want to control access for.
- Select the app and click on the "Share" button.
- Add the relevant people or security groups from your organization who should have access to the app.
- Choose the appropriate permission level (e.g., Can Use, Can Edit) for each user or group.
- Save your changes.

By sharing the app with specific individuals or groups, only those users will have access to the app itself.

2. Data Access Control:
- In Power Apps, the data is typically stored in the Dataverse (formerly known as Common Data Service).
- Access to the data in the Dataverse is separate from app access.
- By default, the security roles and permissions configured in the Dataverse control data access.
- To control data access for the app, you need to define appropriate security roles and privileges within the Dataverse.
- Assign the relevant security roles to the users who should have access to the data.

You can create custom security roles and assign them to users based on their needs. Make sure to define the appropriate privileges for read, write, and delete operations on the data entities used by your app.

3. Protecting Raw Data:
- To prevent users from viewing raw data directly in Power Apps Studio, you can employ the following measures:
- Set appropriate security roles and privileges in the Dataverse to restrict direct access to data entities.
- Limit the visibility of data fields in your app's forms and galleries by configuring field-level security in the Dataverse.
- Implement record-level or row-level security to control which records or rows each user can view or edit based on specific criteria.
- Utilize app-level security features, such as role-based security, to control access to different app functionalities.

By combining these measures, you can ensure that users can only access and interact with data through your app and not view the raw data directly in Power Apps Studio, unless they have the necessary developer privileges.

Remember to regularly review and update the access controls as your app and data access requirements evolve.

[BradonK]

@ShaheerAhmad 

Thanks I'll look into this.

Appreciate the help.