Entra ID delegation issue? Combo box only searching the first 500 entries

[Goodwin]

Hi folks, I have a Canvas app, and a combo box with Items property: Filter('Microsoft Entra IDs', 'Microsoft Entra IDs (Views)'.'Active Users'). I'm using that View filter because I've found that without it, the field is unusable, it takes too long to load. Plus my understanding was that the Filter function is delegable?

This combo box works great for most employees, but we get into trouble with names starting with S and beyond: everyone up to Stephanie can be retrieved, but Steve and anyone beyond cannot. The full table has a thousand entries, and I've adjusted the delegation limit for the app to 1000, but this hasn't made a difference, I'm getting the same results.

Any ideas? Thank you!!

[FLMike]

@Goodwin 

Filter itself is NOT specifically delagatable 100%. It depends on the filters you try to add in that makes it decide if it is or is not.

So if yours has no Yellow warnings etc in the Items property you are good, otherwise you have delegation issues.

If you are only getting 500 back it would seem so.

If I have helped you, I would really appreciate if you please Mark my answer as Resolved/Answered, and give it a thumbs up, so it can help others

Cheers

Thank You
Michael Gernaey MCT | MCSE | MCP | Self-Contractor| Ex-Microsoft
https://gernaeysoftware.com
LinkedIn: https://www.linkedin.com/in/michaelgernaey

[Goodwin]

Good point: there are no yellow delegation warnings in that control or anywhere else. Which makes the behavior even more of a mystery? I said in the title that we're getting the first 500 entries, but now that I think about it, that number was not exact or certain... it came purely from the assumption that this was a delegation issue.

[FLMike]

Hi @Goodwin 

So if that's the case then my previous response is the answer. I have a suggestion just to try something. Do this on your app

Create a button anywhere doesn't matter and type this in the OnSelect

With(
  {EntraCheck: Filter('Microsoft Entra IDs', 'Microsoft Entra IDs (Views)'.'Active Users') },

   Notify(CountRows(EntraCheck));
);

See what the Notify Tells you as to how many rows you get without a secondary filter

Now let's try with a collection

ClearCollect(myCollection, Filter('Microsoft Entra IDs', 'Microsoft Entra IDs (Views)'.'Active Users'));

Notify(CountRows(myCollection));

Also note, that depending on the Connector being used it can impact it.

Lastly, let's try a totally different approach, using the Office365User connector. In the App under data section, select add data, and add the Office365Users Connector.

Now, in your ComboBox control set the Items Property to and see what you get.

Filter(Office365Users.SearchUser(), AccountEnabled = true)

Let me know if any of this helps or you have other questions.

If I have helped you, I would really appreciate if you please Mark my answer as Resolved/Answered, and give it a thumbs up, so it can help others

Cheers

Thank You
Michael Gernaey MCT | MCSE | MCP | Self-Contractor| Ex-Microsoft
https://gernaeysoftware.com
LinkedIn: https://www.linkedin.com/in/michaelgernaey

[Goodwin]

Thank you @FLMike... we haven't solved it yet, but I'm finding this super helpful, so thank you.

The With statement and the Collection both returned 892 entries, and when I switched to the Office365Users connector, that only returned 50.

I went to the Entra ID table and opened it in Excel... not to edit, just to count entries. There are 539 with Microsoft Entra ID Account Enabled = true (and 461 with false). I know for a fact we have just over 800 active employees and a number of non-human accounts, so 892 sounds reasonable, whereas 539 does not.

[FLMike]

Hi @Goodwin 

Yes those all make sense (even the Connector one) I just needed to verify some things and you've done that.

I am happy that the With and Collection returned the same, that was the most important part. And I believe (and have to verify) that you will only get the 500ish with binding to that versus the with and Collection.

So my question would be, are you Ok with using the With, (which is better anyway performance wise), and when you do (or the collection), the Combo has the appropriate data right?

Or even with 892 you are missing something? I guess I mean, you get past the S's which was your original issue.

So swapping out and using the code I gave you, does that give you what you want? Also, active and enabled... I do not believe they mean exactly the same thing. So its possible that explains it, but I would need to see your AAd configuration for Entra.

But seems like, using the With/Collection gives you what you need?

If I have helped you, I would really appreciate if you please Mark my answer as Resolved/Answered, and give it a thumbs up, so it can help others

Cheers

Thank You
Michael Gernaey MCT | MCSE | MCP | Self-Contractor| Ex-Microsoft
https://gernaeysoftware.com
LinkedIn: https://www.linkedin.com/in/michaelgernaey

[Goodwin]

Hi @FLMike 

The problem persists: I still have users missing from the drop-down. The details are slightly different because I've tweaked the "Active Users" table view to filter out more non-humans. Now I get a return of 854 names, and the list ends at T for Ted.

My delegation settings matter, but only to a point: if I reset the delegation limit to 500, I only get 500. But whether I set it to 1000, 1500, or 2000, I still only get 854, and I'm still missing Vanessa, Wendy, Yolanda, etc. 

Maybe I didn't fully understand the intent of the "With" and "Collection" options you suggested: I thought they just counted the items returned using the same formula I already have in the Items property of the combo box. The only time I changed that items property was to test out the Office365Users connector, which didn't seem to help so I switched it back.

I don't have access to our AAD configuration for Entra, can't help you there, but if that's where the problem lies I can take this to our IT dept.