Dataflow: You are not authorized to load data

[pgbartroff]

Questions are at the end. First the goals, important notes, the steps to recreate the issue, then the questions.

The larger goal: To be able to transform and merge (not necessarily append) data together from different sources and make the output available for reporting or for export as whatever file type.

The focused goal pertaining to the Subject of this issue: Using a dataflow to write data to a data verse table.

IMPORTANT NOTES: 

1. These steps actually work in the version of Power Apps encapsulated under Microsoft Teams, but not in the stand alone online version of Power Apps in Microsoft 365, where both under the same work environment.
2. The reason I need this to work in the "stand alone" online version of Power Apps based in MS 365 and not just in the version encapsulated in MS Teams, is that the version in MS Teams is more difficult to navigate and "feels" like it might be  more functionally crippled or restricted in some way, but I haven't had time to dig into that yet, and I might be wrong about that.
3. Also I haven't had a chance to test this in a different environment yet, but the goal is to get this to work in my work based environment so I can build solutions and insights for my department based on the data being shared by other departments.

Here is the breakdown of the 5 steps to repeat the issue and show the error message:

Step 01: Some tables were created to perform some initial tests. 

The first issue/result is that I do not appear to have permissions to delete tables that I have created.

Here is a snapshot of a few of the tables I've created so far. Others are cropped out of the image to keep this clear and easier to follow.

Step 02: A "Dataflow" named "devSimple01" was created to generate data to populate the "Happy New Year Table" shown above. This Dataflow is the crux of this test and is what will facilitate the error message shown in Step 05.

Here is a screenshot of the "Dataflow" screen: 

You can see the refresh error alert, which we will get back to in Steps 4 and 5.

Step 03: The devSimple01 "Dataflow" It is a 3-column table, designed to take 3 data types, from a single line query that generates two rows of data for these 3 columns. This is shown next in two parts, a screenshot of the table and the code that creates it.

Part 01: Here is the screenshot of the successfully generated Happy New Year Table's data.

Part 02: Here is the screenshot of the code that generates the data for the above table:

Step 04: When selecting the refresh error alert (shown in Step 02 above), it shows me the refresh failure history.

Step 05: Final step. After downloading the refresh failure, we can see the error message highlighted in yellow​below.

If the above is not legible, here is a copy and paste of the above message:

You are not authorized to load data to the crc29_tbl_happynewyears_raw table, please contact your administrator to fix the problem and try again.

In Summary:

• The environment I'm logged into at work allows me to create Dataverse tables, but not delete the tables I created or write data that I created to the tables I created.

• This same environment allows me to do all the above without any error in the MS Teams encapsulated version of Power Apps. Yes, yes, I hear you, why not just use that version then? The web-based stand alone MS 365 version is preferred since it is more responsive, easier to navigate etc. and appears to connect more easily to everything at work, except Dataverse tables.

Questions:

1. Given the above steps, and summary, does this appear to be a configuration issue with my work account, and is there somewhere in the admin portal I can go to dig in a bit deeper to find out more?
2. Note that my IS&T department is to overloaded to provide me with support, and they suggested that I submit a ticket with Microsoft. IS&T administers my account, but they are willing to work with me if I can spell out how to fix the issue step by step, such as "go here, then change this" etc. From what I've supplied above so far, is a specific configuration issue on my account suspected, and if so what are the steps to correct it?
3. If this does not look like an account configuration issue, what else can I do to isolate the issue further?
4. Where can I go to submit an official support ticket with Microsoft? Is that something my IS&T department will have to do? Yes they actually asked me this, so I'm reposting it here.

Thank you for your help.

[dpoggemann · Accepted solution]

Hi @pgbartroff ,

The challenge I am expecting here is you do not have a role assigned in the full Dataverse environment to perform the updates to the table 

crc29_tbl_happynewyears_raw

With Dataverse for Teams you will be given this permission automatically do to how security is utilized within Dataverse for Teams (where all users of the team have access) vs. in a full Dataverse environment where you need to have access assigned specifically to tables etc. within the roles assigned to you.  

The following Microsoft article walks through the roles in detail:  https://docs.microsoft.com/en-us/power-platform/admin/security-roles-privileges 

There is the ability to manage this at a Security Group level and add users in Azure AD to the security group and have this assign the appropriate roles (using a mapping to a Team in Dataverse).  This is something else for your IT team to possibly configure based on best practices for simplifying and maintaining security.  This article does a good job explaining this in context of Dynamics 365 but it is transferable to Dataverse in general (https://thehosk.medium.com/dynamics-365-and-ad-groups-ac87856a4c54) 

Hope this helps.  Please accept if answers your question or Like if helps in any way.

Thanks,

Drew

[pgbartroff]

@dpoggemann Thank you. That is exactly what I was looking for. I had intuitively explored some of the role assignment and configuration areas, but wasn't quite sure what I was looking at yet since I hadn't found the articles you have shared. I'm sure my IS&T department has locked down some of this, but at least I have a fighting chance of investigating this further and potentially explaining it to our IS&T department. Thank you, so much for this! Thank you. 😊