Section wise permission in SharePoint Power app Form

[kulldeepverma]

I wanted to check is there any way to create a form with multiple sections or as a set of fields can be editable only to a particular group? or in short, any way to give field level permission to SharePoint list form & group?

[Jeff_Thorpe]

Since SharePoint lists don't support column level security the best you can do is obscurity using a PowerApps form. When can have a PowerApps form in Edit mode but then have certain fields in view mode based on a formula. 

You would need to define the user's role when the form or app is loaded then based on that role set the DisplayMode property of the DataCard or Field control.

This example assumes that the variable IsManager has been set to true or false when the user open the app.

If(IsManager, Parent.DisplayMode, Parent.DisplayMode.View)

[kulldeepverma]

@Jeff_Thorpe  thank you for your response. I have two SharePoint Groups. Can we restrict based on to check whether the user is in a group or not? 

[v-xida-msft · Accepted solution]

Hi @kulldeepverma ,

Do you want to assign SP field level permission to Sharepoint list form or group?

Further, do you want to check if current user is in a specific SP group?

Currently, the SP field level permission is not supported within SP. There is no way to give field level permission to SharePoint list form & group (just like @Jeff_Thorpe  mentioned).

As an alternative solution, I agree with your thought almost. You could consider check if the current login user is in a specific SP group (Office 365 group), if yes, he could access your Edit form, otherwise, he could not.

I have made a test on my side, please take a try with the following workaround:

Firstly, you need to add a Office 365 Groups connector within your app. Set the OnStart proeprty of the App or the OnVisible property of the first screen to following:

ClearCollect(
             SPGroupMembers, 
             Office365Groups.ListGroupMembers(
                                              LookUp(Office365Groups.ListOwnedGroups().value, displayName = "PowerApps").id
                                             ).value.mail
)

On your side, you should type following:

ClearCollect(
             SPGroupMembers, 
             Office365Groups.ListGroupMembers(
                                              LookUp(Office365Groups.ListOwnedGroups().value, displayName = "YourSPGroup1").id
                                             ).value.mail
        )

Note: The 'YourSPGroup1' represents the group name of your two SP groups.

Within the Edit form of your app, set the DisplayMode property of the corresponding Data cards (a set of fields could be editable only to a particular group) to following:

If(
   User().Email in SPGroupMembers.mail,
   DisplayMode.Edit,
   DisplayMode.Disabled
)

Best regards,