Dataverse Environment and Table Permission

[PRAVEENZNMD]

Hello Team,

I am new to dataverse and have few queries related to environment and table permission

1. If I create a custom table on an environment, will all users get access to my custom table

2. How to restrict users with different permission level to a table? ( Read/ read-write)

3. Users with basic user role on an environment will be able to access my app?

Thanks,

Praveen Kumar P

[cchannon]

Role based security is a baked in concept in Dataverse which is extremely mature. When you add a table initially, NO ONE will have access to it except Sysadmins because Dataverse takes an additive approach to role permissions and the entity, being new, will not exist on any of your roles. You would need to add the entity to those roles or create a new role for the purpose. Once there, you will find that permissions to that entity will include Read, Write, Create, Delete, Append, Append To, and Assign. Each of those permissions can be set at the User, Business Unit, Deep, or Organization levels, reflecting how this permission will surface vis-a-vis the record's ownership.

To learn more about role based permissions and the Dataverse security model as a whole, start with this page.

[EricRegnier · Accepted solution]

Hi @PRAVEENZNMD,

Apart from the page @cchannon provided, here's a good summary video explaining Dataverse (formally CDS) security: https://powerusers.microsoft.com/t5/Webinars-and-Video-Gallery/Security-in-Common-Data-Service-CDS/t... 

To answers your exact questions and to supplement on the previous post:

1. Only Dynamics 365 Service Admins and Power Platform Admins in Office 365 and System Administrators and System Customizer roles will have privileges the tables. But these are not granted to "standard" uses, another admin would have to assign those roles to users.
2. By default they are restricted. You keep it restricted by not granting roles with privileges to these tables.
3. No, Basic User role only grants the default privileges to access and work with a Dataverse environment. It doesn't grant them privilege to access model-driven apps or other tables. You should create custom roles based on the Basic Role: see tip #15 from: https://powerusers.microsoft.com/t5/Power-Apps-Community-Blog/Top-15-best-practices-when-configuring... 

More MS docs about security: https://docs.microsoft.com/power-platform/admin/wp-security 

Sorry for a lot of links but hope it helps!

[PowerappsHack]

I have a new issue related to this topic I could use some help with. I've created several tables and apps in Dataverse for teams and have created a channel for users to access them. I want to change Member access for a particular table. I go to the table under the Build tab, choose Manage Permissions, choose Members, choose Collaborate and then Save. It appears to work but when I close and go back in Members still have Full access. Any ideas?