Dataverse Table Permission

[ahamadsaiful]

Hi all. I'm the owner of the app and i want to share my app to everyone in the organization. There's a group user (User) can only create & update their own application. Once they submit the application, it goes to their respective manager for approval. However the manager can approve/reject the application and at the same time create, update his/her own application and submit to Head of Department for approval. Understand that i can control the role access via the apps. However if i set permission for the application table as Member with Full access, does it mean all user can access the table when they trying to build new app? Is there any other table permission i can set for application table?

[KBilakanti1]

@ahamadsaiful , you can create a custom security role and provide the required access for the table(create/read/write/delete/assign/append/appendto etc.,) which you want users to be interacted with from app. When sharing the app to users, you can select the custom security role.

[ahamadsaiful]

You are suggesting to control the access role from the app right? However, i still need to share the table with Full Access because "Manager" & "Head of Department" are required to "Update" user application

[KBilakanti1]

@ahamadsaiful , the same security role will suits your requirement for Manager and head of Department as well.

[rampprakash]

Hi @ahamadsaiful,

Open Model Driven Apps --> Click Gear Icon on Top --> Select Advance Settings --> Select Security--> Select Security Role --> Click New Security Role

And provide Permission like below Screenshot

and Save the Security role

Once Done assign this security role to the users/Manager/Head.

Let me know if you need more clarification

[EricRegnier]

Hi @ahamadsaiful, what type of app do you have canvas apps or model-driven? Also, by application do you mean users can create their own Power Apps (canvas or model-driven) or application type of table, so records?

[ahamadsaiful]

Since i'm a beginner in Powerapp for Teams and Dataverse, i'm planning to build canvas app with sensitive data (something with employee records). Assuming i've created table "Applications" which store all application submitted by User (consist of User, Manager, Head of Department & etc). Once submitted, Manager will update the application table and it goes to Head of Department. So my question is, if i give Full Access for "Applications" table, can other user view the table. Since i notice, there are only 4 type of permissions available (Full Access, Collaborate, Reference & Private) what type of permission should i set for "Applications" table

[ahamadsaiful]

@rampprakash i'm building canvas app. Does it apply to canvas app?

[EricRegnier]

Thanks for clarifying, there are two types of permissions 1) users with the Teams 2) other users that have access to the app which you'll need to set both. I would give them both Full Access access because they need to update records created by other users. Note that they will be able access all the records. If you need additional security you'll need to filter the data within the app...

Hope this helps...

[ahamadsaiful]

@EricRegnier thank you for the detail explanation. Since the app is for internal use, i'm planning to embed with Teams. Yes, understand i can filter within the app but my concern is i don't want other user to view the "Application" table since it contains sensitive data