Fetch all the users of a model driven app through Power Automate

[Anonymous]

I have a scenario where I need to fetch all the users of my model-driven app I need their Email so that I can send Emails to my app Users/members. I need to achieve this by Power-Automate flow. But unfortunately did found any hint. Is it possible to get all the people who are users of my model-driven app and store their emails in an array? 

any help is highly appreciated!

[dpoggemann]

Hi @Anonymous ,

Have you looked at using the following approach (https://www.serverlessnotes.com/docs/retrieve-list-of-users-and-roles-in-environment)?  This looks like it may help you solve your query.  Let me know if this does not do what you are trying to accomplish.

[Anonymous]

Hi @dpoggemann  thank you so much for your reply. I highly appreciate this act of kindness. 

Well, the provided link is giving all the users in the environment perhaps I just want to retrieve the users of a specific Model Driven App. 

Second thing is that the action "List Rows" is a premium action and needs licensing, which would not be preferable. 😞

[dpoggemann]

Hi @Anonymous ,

This will give all the users with specific roles.  The role is assigned to the application and the user is assigned a role in Dataverse giving them access to the application.  The users aren't "shared to the application specifically".  You would need to setup roles specific to the application and use the approach suggested to identify the users of the application.  If you are using Model-Driven Power Apps you should already have the ability for premium connectors, this is required to query as described.

[Anonymous]

Oh, now I got it... Yes, I already have the role assigned to users... Basic Users and 1 is another group. Let me try again if it works I will come back to tell you.  

Thanks. 

[Anonymous]

hi @dpoggemann, first of all, I would like to thank you for guiding towards the right path to follow. yes, you were right the premium licensing was not a problem I just need to switch my environment, The "List Low" action is indeed returning me all the users. Now I am stuck on how to filter the outcome of "List Row" I tried by doing Select, Json and Filter actions but could not make it done. Could you kindly help me more with the filtration part? Here the screenshot of my last try with Filter.  It is returning me blank output

[dpoggemann]

Hi @Anonymous 

You might want to try the following in the initial List Rows to limit as a fetchXML Query to limit the results based on the role assigned to the user.  This example provides you an "Or" on the roles to show you can have multiple.  One easy way to get this type of FetchXML details is to go into the legacy Advanced Find and query the tables.  In my case, I started with User and then grabbed the related table "Security Role".

<fetch version="1.0" output-format="xml-platform" mapping="logical" distinct="true">
   <entity name="systemuser">
     <attribute name="fullname"/>
     <attribute name="businessunitid"/>
     <attribute name="title"/>
     <attribute name="address1_telephone1"/>
     <attribute name="positionid"/>
     <attribute name="systemuserid"/>
     <order attribute="fullname" descending="false"/>
     <link-entity name="systemuserroles" from="systemuserid" to="systemuserid" visible="false" intersect="true">
        <link-entity name="role" from="roleid" to="roleid" alias="ag">
           <filter type="and">
             <filter type="or">
                <condition attribute="name" operator="eq" value="System Administrator"/>
                <condition attribute="name" operator="eq" value="System Customizer"/>
             </filter>
           </filter>
        </link-entity>
     </link-entity>
  </entity>
</fetch>

[Anonymous]

Hi @dpoggemann, thanks for your reply, Well the thing is all the members with the, let's say, 'System Administrator' role are not the users of my model-driven app. How do I figure out that this user who is assigned the 'System Administrator'  role is also the member/User of my app? I just need some selective person from these roles with whom I have shared my App. 

For clarification let's say I have 50 users in my tenant who are having the "Basic User" role. but my Model Driven app is shared with only 20 of them, not with all 50. Now how do I figure out that this user from "Basic Users" have access to my app.  

[dpoggemann]

Hi @Anonymous ,

If you really want to look at the telemetry specific to the application and the roles identified can go across applications then I would suggest looking at telemetry information in Application Insights to report on users of the application.  You can then also report on additional actions within the application as well as defined.

https://learn.microsoft.com/en-us/power-platform/admin/analyze-telemetry 

[LinnZawWin]

@Anonymous 

Unlike canvas apps, model-driven apps use role-based security for sharing. E.g. You have assigned a "Basic User" role to your model-driven app ABC and you have 50 users in your environment who have the "Basic User" role. Then, all 50 users have access to the model-driven app ABC no matter if you only share it with 20 of them.