guest user flow permissions to dataverse

[ajj81]

Hi all,

looking for some help.  Our setup involves us guesting in our developers of powerapps.  All have per user licenses and system administrator privileges assigned in the environment.  They have created a dataverse connection and a simple flow to read the contents of a single dataverse table however its giving a 403 forbidden error when they try to run it.

They are assigned into a team with system administrator privileges too so I am really confused.  I have read that guest users can only read "their own" records and not those created by others but surely as a team member/user with full system administrator privileges they should be able to read the records that they need?

Has anyone had any similar experiences or able to assist with this?  My current workaround involves using a named account in the home tenant but I want to have the full tracability of who's doing with the connection being made by the end user that is running the flow.

thanks

[v-wenjuan-msft]

Hi @ajj81 ,

According to your description I think Per user plan and system administrator should be enough for access a Datavese table. To narrow down the issue, think you can try below steps:

1. Access the Dataverse table directly to see whether the 403 error happens there;

2. Open your system administrator role to see whether it conclude full privileges to that table;

3. If yes to 2, try to assign the system administrator role directly to the users.

Community Support Team _ Wenjuan Zou

If this post helps, then please consider Accept it as the solution to help the other members find it.

[ajj81]

Hi,  thanks for the response!

we thought that oo - here is the output of testing:

1. I cant seem to add any data to the table - not sure where I would get any for of log/diagnostic information.  It just says it cant be saved.

2. System administrator role does have the permissions to that table

3. The user already has the system administrator role directly assigned.

Thanks

[ajj81]

I recreated a simple dataverse table and flow to read it.

The guest user can read/edit/update the table via the maker portal but when you try to access it via a manual flow it throws the 403 forbidden error. looks like a disconnect between powerapps and powerautomate when you are a guest user.

[xmihux]

In general, guest users can't create. Have you enabled this tenant setting? Invite users with Azure Active Directory B2B collaboration - Power Platform | Microsoft Learn

Also, are they using the Dataverse or Dataverse (legacy) connector? The legacy one doesn't support guest access. The "modern" one requires guest users to be licensed through your tenant, not their tenant. Maybe that's the problem? Refer to this table and the note under it: Share a canvas app with guest users (contains video) - Power Apps | Microsoft Learn

[ajj81]

Hi,

Yes we have enable all of the settings as per the guidance.

Yes we are using the latest dataverse connector too and are working within the guidance of the article.

Some good idea to check though, anything else you can think of?

Thanks