Powerapps and Sharepoint Online Permissions

[ericonline]

Hello,

I created a PowerApp with a Sharepoint custom list as the data source. I granted all 315 users of the app "Site Member" status (R/W/E). 

Problem: 

• The PowerApp has a LOT of validation in place (no blanks, min char counts for comments, etc.)
• The Sharepoint URL leaked out and users have been creating new records DIRECTLY in the Sharepoint list instead of using the PowerApp
• This has resulted in many partial records that make reporting impossible. 

Question: 

• How can I grant the correct permissions to allow users access to the Custom List but NOT give them permission to edit the Sharepoint list directly if they have the URL?

Thank you

[AndrewWoo8k]

awesome and hope it works

[seadude]

Hi @WarrenBelz , after some testing, I must be missing something because users are still able to view/edit/etc the list. 

Do you have a blog post on the steps to take?

[WarrenBelz]

Hi @seadude ,

I have over 100 field staff on iPads using Power Apps only with the below permission structure. It was set up some time ago, but I know they have to ask for permissions when they need to access the relevant SharePoint site.

[Anonymous]

thanks for new idea I got from your post !

[AndrewW]

How about Microsoft List - it is exposed there

[PabloD]

How is that the connection defined in the app is not used to access the list? The connection has a set of credentials and those should be used. Having PowerApps accessing the data source (SharePoint) directly with the credentials of the user using the app seems to go against what you would do with any app, regardless of environment...

All the solutions posted here approach security by obfuscating the location of the list, which is a bad practice. (with the exception of @WarrenBelz 's)

Has anyone found any way of leveraging the concept of PowerApps connections to read/write form a SharePoint list?

Thank you

[Anonymous]

@PabloD 

I found that one can create 'New List' in SharePoint and then with 'Integrate' option of 'List' one will able to connect/create related form/web part in PowerApps. 

I also found that providing read access to a group will not ask for confirmation to any group members. Though haven't checked thoroughly.

[Fleur]

I used Jeff Thorpes solution but I didn’t recreate a whole new app, I just put a message... editing this list is done via this Powerapps and inserted a link. Simple and effective. 

[PabloD]

The problem with that is that you block access from *every* user, so it's not really a way to manage access but rather a way of disabling features for everyone... I'm still surprised this cannot be controlled via the connection set up for the SharePoint list... I guess this is still a young product (albeit charged as if it were a mature one!) 🙂

[ericonline]

This is a good idea for apps that have 1, maybe two SP Lists. But when an app has 3+ lists, creating a "Customized Form" PowerApp for each list is a bit much. I wish there was an easier way to do this! Going to try @WarrenBelz 's method next.