POWERAPPS FOR MAKERS: Permission Bug?

[ericonline]

@RezaDorrani and i have been working for a couple days on a related issue here... Thought it was all resolved, but there seems to be a bug in the way Edit App Role Assignment is adding/removing users from the PowerApps permission list. 

Scenario:

• Trying to build self-service permissions into a PowerApp where app admins can add/remove users from their app.

Steps to reproduce:

• In the PowerApp
  • Click "Add User"
  • Search for users name in a People picker combobox (tied to Sharepoint Person-type column)
  • Click "Submit"
  • SubmitForm() creates a new record in the Sharepoint "Access" list
  • "AddRemove" column set to "Add"
• Flow
  • Trigger: When a Sharepoint Item is Created or Modified in "Access" list
  • Switch statement:
    • If "AddRemove" column = "Add"...
      • Action 1: Sharepoint HTTP
        • Adds user to Sharepoint Permission Group (for Sharepoint access)
      • Action 2: Edit App Role Assignment
        • Adds user to the PowerApp
        • 
        • This adds the Users name to the PowerApp under "Share", BUT the user cannot access the PowerApp!
        • They receive the error:
          • 
        • And after clicking "Request Access", I receive a request email...
          • 

Issues:

• If I look in the "Share" area of the app, the user in question is listed, but they cannot access the app!
• Only after I type in their name and click "Share" from this screen, can they access the app!
• If I remove their access using the Flow that @RezaDorrani assisted with, the user loses access again BUT their name is not removed from the "Share" screen!
• There is no way to remove their name from the "Share" screen. Clicking the "X" next to their name temporarily removes their name, but there is no "Save".
  • As soon as the "Share" screen is closed an opened again, the name reappears (though the user still does NOT have access).
• 

Need some guidance here... approaching two days trying to get this solution working. Feel like I'm in a mess now!

[ericonline]

Two things i'm looking at are: 

1. In my tenant, the O365 id <> the PowerApps id
2. I ran my name through the Flow with CanView permissions, now I'm listed twice, once as Owner, once as User. 
   1. I can't remove my User listing (or anyones User listing) from the Share screen

[RezaDorrani]

Hi @ericonline 

Looks like some bug in your tenant

[Anonymous]

Hi @ericonline are you still experiencing this issue?

@Anonymous 

[ericonline]

Hi @Anonymous , thanks for the follow up.

Yes, issue still persists. I opened up a support ticket a few days ago, supplied more info, awaiting response. 

Issue #: 119082324004674 if you're able to nudge at all 🙂

[TrentDiego]

I'm having this issue as well, all the way here into 2020.
This wouldn't be an issue if we could specify a group rather than only users names in the PowerApps "share" section. 😕

[ericonline]

Here is what I ended up going with. Using the UPN (varUserID) in put-id instead of userEmail in put-email...