Powerapps and Sharepoint Online Permissions

[Anonymous]

Hey all,

I've searching all the threads that talk about this, but I didn't find what I want.

I created an app through Powerapps that Adds, Edits, and Deleted rows from a Sharepoint List.

I want to share it with people in my organization.

What I did:

• Shared the app throught Powerapps and gave them 'Can Use'
• Shared the Sharepoint Site with them and gave them 'Member'

The problem is, the 'Member' cannot see anything, the Galleryview is empty.

But I gave them 'Owner' they can see it and working well.

The problem here is:

How can I give the people in my organization access to the Sharepoint Site and not have them edit anything in the Sharepoint Site. In other words, they can only edit the list through Powerapps.

Thanks again and again for your great support and wonderful team.

[morgade1]

Have you tried giving them Full control of the list? That should give them access to read-write to the list without giving them more than they need at the site level.

[Anonymous]

Okay, you meant that I them 'Member' on the site and read-write access? That could work, but I want them to add tasks, and edit a few columns not all of them, and never delete.
Is that doable?

[morgade1]

I mean you give them Guest rights at the SITE level (if you want them to only have read to everything EXCEPT what you choose) and give them contribute rights at the LIST level by disinherieting the permissions from the list in the permissions section. Then you can do the same for permissions in the other LISTS like tasks, etc that they need to be able to add and edit in.

[Anonymous]

Okay okay I got you.
But im unable to give Guest I only can give Owner and Member, thats all what i see, and how to give rights to certain people on the List level?
Thanks:)

[morgade1 · Accepted solution]

Go to the settings on the LIST and select Permissions then you can set the specific permissions you want a group or individuals to have on the LIST. Whe you go into {siteurl}/_layouts/15/user.aspx you should see the permissions for the site, you can create a Guest or Read group from the button Create Group at the top, if you dont see that then you may not have site owner permissions and should check that. The permissions levels are maintained at the site collection level, if this is a subsite then you will need to go to the top level and change it there.

[Jeff_Thorpe · Accepted solution]

An easy way to troubleshoot the issue would be to add the user to the Members group (should have Edit or Contribute access) and then have the user go to the SharePoint site (Home page) and see if they can navigate to the list that is used in PowerApps. If the user can't get to the site then and the site is a subsite then there is a permissions issue with the root site. If the user can get to the site but can't see the list then permission is with the list (most likely the list has broken inheritance) or if they can get to the list but can't see any items then it might a list item permission issue (broken inheritance) or the list could be using an advance setting that only allows the user to view items they created.

[ChinoDoesStuff]

Hey Sababneh,

I just recently posted a video explaining how you modify list item permissions from within your PowerApps application using Flow and SP Rest end points.

https://youtu.be/T6cC65YwjSI

[Anonymous]

Hi,

If i understand your question correctly, don't give read level permissions for the list, if you want to submit the data from your powerapps App. You may give read access for site level and give contribute or other equalent permissions for List level so that you can able to submit the data from powerapps.

Thanks

Vishnu

[Neil425]

You can discourage users from going directly to the SharePoint list using Target Audiences:

1. Visit the list settings. Under Advanced settings, under List experience, select Classic experience and click OK.
2. Browse to the list. It should now be presented in Classic experience (may require a page refresh to see the change). Note that you should be viewing the default view for the list, as this is the view that users are going to see if they visit Site Contents and click the list.
3. From the settings wheel, click Edit page.
4. In the upper-right corner of the list web part, click Edit Web Part.
5. In the properties panel for the list web part, expand the Advanced section.
6. In Target Audiences field, specify the group(s) which should be able to view the list directly, such as the site's "Owners" SharePoint permission group.
7. Click OK to close the properties panel.
8. Click Stop Editing to the list page.

Now only members of the specified Target Audiences can see the contents of the list using the default list view. Everyone else will see an empty page.

Notes:

• Using Target Audiences in this way does not secure the list! It simply limits who can see list contents using the views to which Target Audiences have been specified.
• Users who know the URLs of other list views can use those views to access the list (unless the steps above have been applied to those views as well).
• Users who have created personal views of the list will still be able to use them to access the list.
• The users who should be able to use the Power App to write data to the list will need Contribute permissions to the list. Do not provide them with Edit or Full Control permissions or they will be able to access the list settings and create new views that won't have Target Audiences applied.
• Even if Target Audiences have been applied to all list views, and you know for a fact that nobody has created personal views, a sufficiently knowledgeable and motivated user may find a different way to access the list contents. That said, this approach should keep anyone short of a SharePoint power user or a developer from nosing around the list.