Need help with conditional logic for displaying galleries based on AD group of logged in user

[SPUser1980]

Hello guys,

I am really stuck with an issue that I hope anyone can help me with.

-I have 2 sharepoint document libraries named "Australia-PublishedDocuments" and "Indonesia-PublishedDocuments"

-These Doc libraries are assigned to their respective Azure AD dynamic security groups "SPO_Australian_users" and "SPO_Indonesian_users"

-So when a user within that specific group logs in, they are able to correctly access (or not access) the document libraries (Eg, user belonging to the Indonesian group can only access the Indonesian Library, and same goes with the Ausgroup. 

However the problem comes in PowerApp. I am having a requirement to conditionally load the correct powerapp gallery, based on which of the above groups the logged in user belongs to. For example, in the app I have a gallery that is connected to the "Australia-PublishedDocuments"library, and another gallery connected to "Indonesia-PublishedDocuments" library.

To get this logic working, this is what I have tried :

1. Set the app's onstart property as below (setting two separate variables, one for aus group and one for Indo group) : 
     -I am passing the group id value (From azure ad) for these two groups in the blue area below

2. I am then passing this variable in the "visible" property of these two galleries 

3. The "Items" Property of these galleries are just the standard filtering (based on search box and drop down fields). I have not referenced these variables in items property.  

Question : 
---------------
When Iogin as a user belong to either of the 2 groups (Aus or Indo), I get a error message and can't see the gallery. Also there is no error in the syntax in the above formulae in the onstart or the gallery.  Not sure why I see below message (the access denied message in red above the screen). 

Note : I have also ensured that each of the doc libraries are shared with the respective ad groups I did login as the user and verify access to the doc libraries (for eg the aus user can only access the aus document library, and same for Indo user).  Also when sharing the powerapp, the user does have access to the doc libraries when sharing


any pointers would be appreciated

[FLMike]

@SPUser1980 

Hi, you didn't specify if the error was only for Users, or Yourself as well. For you I don't expect an error in dev since you were able to add the datasources, that means you have the correct priviledges.

Have you added the users to the SharePoint Site and verified they have access to the Lists?

If you need more information, which I would need as well, do this. (Assuming you need a user to do it)

Step 1. Close the App (stop it running)
Step 2. Have the user go to the Apps Tab in the UI not on the app (powerapps.com etc)
Step 3. On the App line, click the ... to open the popup
Step 4. Click Monitor so it opens
Step 5. When it happens click the Play Published App/Version
Step 6. If the error happens right away then do NOT have them do anything but load the app
Step 7. Go to the Monitor and Filter (top right) based on Error, or key word. Go to the line or lines that match this

Step 8. Look at the Response Tab and you will have to expand the Body > and the Header >. Then look at the body to see more details on the error
Do this for each line you find

Step 9. On each line, also check the Code being executed on Tab 2

This way it should tell you specifically what Permission they are missing.

Feel free to post the error here. Make sure to look at the Headers etc not just the message body in the Monitor Error

If I have helped you, I would really appreciate if you please Mark my answer as Resolved/Answered, and give it a thumbs up, so it can help others

Cheers

Thank You
Michael Gernaey MCT | MCSE | MCP | Self-Contractor| Ex-Microsoft
https://gernaeysoftware.com
LinkedIn: https://www.linkedin.com/in/michaelgernaey