control access of external users?

[Kran]

I want to use the same portal for multiple projects.

Is there any way to control what each external users will be able to read, create, update, etc?

[hardikv]

Hi @Kran 

Yes, you can control user for read, update and delete by Web Role. You have to configure "Web Role" for the user. By assigning these web role, you can manage visibility of data.

[OliverRodrigues]

please refer to the documentation on Entity Permission / Web Role and Web Page Access Rules

https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/assign-entity-permissions#:~:text...

https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/webpage-access-control

------------

If you like this post, give a Thumbs up. Where it solved your request, Mark it as a Solution to enable other users find it.

[Kran]

OK thanks.

Just to be clear. Can I give users different access to data? (Or will all users assigned to Web Role have the same access?).

[hardikv]

Hi @Kran 

If you have 2 users and your requirement are:

- User1 can View/Add

- User2 can Delete

then you need to create two different web roles with appropriate Entity Permission / Web Page Access Rules. You should also assign appropriate web role to the user.

[v-xida-msft]

Hi @Kran ,

Do you want to control the access for each user in your PowerApps Portal?

Based on the needs that you mentioned, I think the "Web Roles" feature in Portals could achieve your needs. On your side, you could consider create different "Web Roles" in your Portals with different Entity permission or Web page Access permission. After that, assign proper Web Role to each user in your Portal.

Note: You could create different Entity permissions or Web Page Access permission in your Portal, to control the access for each user in your Portal. The Entity permission or Web Page Access permission could not be assigned to specific users directly, they need to be assigned a proper "Web Role", then assign the "Web Role" to specific user.

Please check the following article for more details:

Configure Entity permission in Portal

Configure Web Page Access Permission

Please consider take a try with above solution, then check if it could help in your scenario.

Best regards,

[BinodNepal]

Hi @v-xida-msft 

I am in a situation where I have an entity linked to Account. e.g. Entity A,

I am trying to create 2 web roles, 1 read only, 2 Edit 

I did create 2 of those entity permission and 2 web roles.

Entity Permissions : 1, EntityA_ReadOnly. 2, EntityA_Edit and created 2 web roles accordingly. and assigned to those web roles respectively. Web roles in general section I have No for both Authenticated Users Role and Anonymous Users Role.

After that I have assigned the web role to a external user (contact) now the user only has role EntityA_ReadOnly but when I go to the portal I can see a submit button and the user can modify the Entity A. 

What I did again is from yje EntityA_Edit entity permission I removed the Edit permission and now the user is not able to edit but only able to read, this is what I want to achieve. the user only has the read only web roles assigned if you are thinking if I have assigned both the roles.

Now if I go back and give edit permission on that EntityA_Edit entity permission the same user can make changes to the data, without the user having the Edit web role, it is driving me crazy I must be missing a step somewhere. The scope from Entity A to Account is a Parent Scope and Account entity permission is Read Only.

Your help is highly appreciated.

thanks

Binod