Powerapps and Sharepoint Online Permissions

[ericonline]

Hello,

I created a PowerApp with a Sharepoint custom list as the data source. I granted all 315 users of the app "Site Member" status (R/W/E). 

Problem: 

• The PowerApp has a LOT of validation in place (no blanks, min char counts for comments, etc.)
• The Sharepoint URL leaked out and users have been creating new records DIRECTLY in the Sharepoint list instead of using the PowerApp
• This has resulted in many partial records that make reporting impossible. 

Question: 

• How can I grant the correct permissions to allow users access to the Custom List but NOT give them permission to edit the Sharepoint list directly if they have the URL?

Thank you

[ericonline]

Hi @WarrenBelz , where are you seeing all these checkboxes? If I go to:

1. Gear Icon

2. Site Settings

3. Site Permissions

4. Create a new group ('test')

I'm only given permission level checkboxes (Read, Edit, Contribute, etc.). 

Where are the granular controls you show above?

[WarrenBelz]

Hi @ericonline ,

You need control of the site (parent site if you are working on subsites), then as below
Gear icon > Site permissions

Advanced permission settings

Permission levels

Add a permission level (then you will get the screen I posted earlier)

[panand99]

Hi,

You can also prevent users from creating new records by -

1) Create new powerapps app by 'customize forms' from sharepoint list.

2) On your SharePointForm, remove all fields and create new label 'Please use Powerapps <link to the powerapps> to create/edit record"

This will prevent all users from directly create/edit/view records from the list.

Please reply if you have any further questions.

Thanks,

Prashant

[ericonline]

The issue with this approach is that you need an additional Sharepoint-customized-form-PowerApp for each Sharepoint list. 

When a Stand-alone PowerApp has, say, 4 lists associated with it, you now need 4 additional PowerApps to support this approach. This can get complex quickly and it creates unnecessary apps in the environment as each Sharepoint customized form is actually a PowerApp.

[twister]

@WarrenBelzcan u share to me how to use this custom permissions? I've already create new custom permission "Power Apps Field Users" as your advise but i dont know how to use/share this permission to users within organization.. thanks

[WarrenBelz]

@twister ,

You need to share the list/ site with a group using that permission level.

[twister]

@WarrenBelzthere is no selection for new perimssion..

[WarrenBelz]

@twister ,

Go into Advanced Site Permissions

[IbrarAhmad12]

This will Help you.

use this on Gallery

Fiter('sharepointtablename','Created By'.Email = User().Email)

[poweractivate]

@ericonline In case you or someone else wants to know how to grant permissions to a SharePoint List on a granular level without necessarily inheriting the SharePoint Site permissions, you can check here:

Grant read/Edit access to users for a List