Dataverse - Row Level Security for Selected Approver

[SBX]

Hi All,

I have a simple time entry app (model-driven) where the user records their time and selects the approver from a user lookup field.

How do I apply row-level security for the approvers, so they only see the records where they have been assigned as the approver?

Thanks,
Sam

[Jmanriquerios]

Hi @SBX 

The first thing is that when you create the field you must activate the property

Then you must create the security profile

Entidades de seguridad de campo (Microsoft Dataverse) - Power Apps | Microsoft Learn

We will have the new field that we have created

NOTE: to add the field security option you must do it with the old interface since make.powerapps.com does not allow

[SBX]

I’m sorry I’m not quite following this;

• Created an approver column (user lookup) with column security enabled.
• Created field security profile with the settings you have highlighted. Do I add the approvers under users?
• Do I need to create a security profile for the approvers and then assign those security roles in the environment?
• I’ve tried the above, and the approvers can’t see records where they have been selected as approvers.

Thanks,

Sam

[Jmanriquerios]

Hi @SBX 

Created an approver column (user lookup) with column security enabled. (Correct)

Field security profile created with the settings you highlighted. Do I add the approvers under users? If you must place them as users

Do I need to create a security profile for the approvers and then assign those security roles in the environment?
You need to create the security profile, it has nothing to do with the roles and within the profile add the permission they will have on that field, if they can read, update and create.

I tried the above and the approvers cannot see the records where they were selected as approvers.
One thing is the field security profile so that that field is only seen by the approvers and another thing is being able to see the record, so that they can see the record they must have a security role with permissions on that minimum reading table and at the level of organization