Other users cannot access environment if database is created before user assignment

[SeanTCG]

This is what I'm seeing:

I create a new Trial environment, with database, then assign users with Environment Maker roles.  Those users cannot access the environment (in make.powerapps.com the environment is not available as a selection).  I have attempted assigning all roles to these users with no difference.

If I create a new Trial environment, skip the database, then assign users with Environment Maker roles, then create database, those users are able to access the environment.  I have noted the roles those users were automatically assigned and verified they were included in the roles I assign manually when creating the database when creating the environment.

[RezaDorrani]

Hi @SeanTCG 

Once you create a database then the secuirty for the environment shifts to the database model, I believe it should move the existing security over 

But check again,

Go to admin center, select environment with database and then click on assign security roles

This will take you to a users view, select the user go to manage roles and make sure they are env makers

Regards,

Reza Dorrani

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly

[SeanTCG]

Hi, you're correct, if I have existing users, the environment does switch to database security, and the existing users, who were Environment Makers, are still Environment Makers, but they have also been assigned Common Data Security Users and System Administrators roles.  The users are able to access the environment.

The thing is, if I create the environment with a database, THEN add the users and assign them these very same roles, they cannot access the environment.

[RezaDorrani]

Hi @SeanTCG 

might be a timing issue

1  - Do they see the env in the list?

2-  what if they directly access the link? do they get access denied?

[SeanTCG]

No, they do not see anything but the default environment, even days later.

I have not tried providing a link, I will see if I can do that.

[RezaDorrani]

Hi @SeanTCG 

try with link, maybe because its a trial env it has some gotchas 

[v-xida-msft]

Hi @SeanTCG ,

Have the end users been assigned with proper Security Role to your PowerApps Environment?

Have you taken a try with Pro Environment?

Within your PowerApps web portal, please go to Settings-> "Advanced Customizations"-> Users, then find the user, check if he has been assigned to a proper Security Role.

In addition, please also consider create a Pro environment within your PowerApps along with Common Data Service database, then assign the proper Security Role to your end users, then check if the issue still exists.

Also please make sure the end users you assigned Security Role to are all users in your Org, rather than users outside your Org.

Note: Currently, we could not assign a Security Role to external users outside your Org.

Best regards,