PowerApps Manage Access and Azure Security Groups from an app

[@franknielsen3219]

WUHAAAA - this is crazy stuff. You 110% deserve the KZbin trophy in the background. keep up the awesome good job 👏👏👏👏👏

[@ShanesCows]

Thank you so much 😀

[@andynortholt]

It worked! I needed users within our organisation on different tenents to be able to access a powerapp on a page AND be able to click the edit button and edit the record, and for that to update the SharePoint list. Shane's solution worked. Lifesaver!

[@Andyandrwew144]

You have NO idea how long I have waited for this.Thank you Shane and all that played a part of this A-Bomb

[@ShanesCows]

Glad to help

[@Andyandrwew144]

@@ShanesCows I took your example and built a component in my core component library that is built off of the People screen template. Instead of building the collection called MyPeople, I made it automatically add the user to the group when selecting their name and then automatically remove the user when clicking the ‘X’ icon next to their name. The component only asks for the group’s ID and I’m feeding that through a gallery of owned groups.

[@FadyAnwarS]

Finally an explanation to sort the access. Thanks dear 👏👏

[@ShanesCows]

You are welcome 😊

[@imran002ali]

Hi Shane, very informative, thank you for sharing your knowledge 👍

[@ShanesCows]

Happy to help. Have a great day. 🐶

[@alexpena9419]

Thank you Shane. This video is exactly what I needed. You rock!!

[@ShanesCows]

Awesome Alex!

[@nazuu]

Thanks!

[@ShanesCows]

Appreciate that. Very kind of you. 😍

[@Giu.Tanaka]

Dear Shane, I appreciate so much your creativity and your fun teaching way ! I understood that byt this groups how to give acess to the app, but I coudn't see how to give acess to the data on Sharepoint. Thank you for the great video

[@moyura2]

25:23 I have the same setting for Security Groups & Microsoft 365 Groups but I cannot access self group management, I believe the 'Restrict user ability...' needs to set to 'No' in order to access it.

[@motitire]

Thank you for this. A question...How do you set the user type 'owner/admin" from within the app? Is this even possible within the app using this approach?

[@ShanesCows]

I am not sure, I have always done in through the Ui.

[@markgovatos2281]

Great video, Shane! I just had an app developed that has shows and hide certain form elements based on security group access, but I have one particular user for whom the security features are not working. Is there some active director attribute I need to look out for? This specific user had a name change a couple of years ago and I her active directory information was updated after that.

[@ShanesCows]

I am not sure Mark. :( I agree you need to start digging into the user but not sure your plan of attack. Try hard coding their value, can you figure out what is or isn't happening when you automate it based on what hard coding shows you. Good luck

[@spageBIM]

Hey Shane, is there a way to easily do row level permissions with SharePoint data sources for external "guest" users? Trying to share an app with outside consultants but they aren't working on every project in the app. Other suggestions if not, which is what I assume?

[@ShanesCows]

This help? PowerApps SharePoint Item Level Permissions via Power Automate kzbin.info/www/bejne/rHi2f6WgbZd9mas

[@therealnmg]

Thank you for this! My question is is there a way to check if the user is already in the current list? I can't seem to catch the error so I can't manage it.

[@saurabh08ful]

Hi Shane, Can we add a member as owner in Azure group from powerapps or power automate?

[@ShanesCows]

I have never tried but I would bet it is possible. You probably have to use the Graph API.

[@jdsalazarv1]

Hello Shane! Quick question how do I save user as owner of the group? Best Regards

[@ShanesCows]

Sorry, I haven't done that before. I am guessing you have to use the API but not sure.

[@mblherry]

Hello Shane, Fantastic video! Thanks. Is there a way to suppress the email notifications to the users being added to the group?

[@ShanesCows]

Not that I know of Marlon but I have never tried either.

[@coolname-pf2xh]

very nice video, Shane. Very informative and helpful.

[@ShanesCows]

Glad you enjoyed it!

[@athanasioszisopoulos387]

Hi Shane, greaaaat video thank you, is there any way to retrieve all the owners from the security group inside the app?

[@ShanesCows]

If there is you would probably need to use the Graph API. I have never tried though. Good luck

[@adrianrawcliffe2713]

The example you have given gives access to the app, but what about data sources - do the users still have to be added to them manually. I tried adding the group I created to a SharePoint list, but it doesn't show in the search :-( Ignore me......it just took time to update I guess. So happy - I am going to try and create a flow that updates the security group once someone request access to the app.

[@ShanesCows]

Glad you got it. Good job 👍

[@saradehond3293]

Hmm. If I have created an Owner team in 365 and don't want to link it to an ad security group. Is it possible to see those members in another way?

[@ShanesCows]

There is an Office 365 Groups connector. That should show you the people in your group. :)

[@0101Matrix0101]

If you have a security group with more than 999 members and you want to check if a user accessing your app is in that group then Office365Groups will be of no use for this scenario. There is an Azure AD powerapp connector that can be used to lookup the current user against all members in a security group but that cannot be used/shared with everyone in your organization (due to security reasons). Wonder if there is a workaround for this.....

[@ShanesCows]

I need to play with this idea more. 😀

[@TheKermit2110]

Hi Shane, am a very satisfied member of your curated apps. Thanks for another great addition. Have a problem with the office 365 user search - it returns a blank (I.e. no users from my AD despite me having no issues accessing security groups via the way u demo’d), even when removing filters. Any ideas? Thanks

[@ShanesCows]

Try this: Office365Users.SearchUserV2().value

[@bossrf274]

Can you make the security group mail enabled on that panel?

[@ShanesCows]

Not that I know of. 🤨

[@munkybutler1]

Hi Shane, thanks for this, it's a very interesting subject. Strangely this works for me with Microsoft 365 groups that I have created in Teams. I get the GUID from the Object Id in Azure Active Directory.

[@ShanesCows]

The management works but can you add the group to share the Power App?

[@munkybutler1]

@@ShanesCows Yes I have added the group to share the Power App and it appears to work.

[@anthonyleduc]

Hi shane, what an interesting viedo. I need to a give a try next week but is it working for a sharepoint group ?

[@ShanesCows]

No, SharePoint groups aren't supported this way. Maybe you can adapt this video to do what you want. kzbin.info/www/bejne/qIPRk5hneMuEaZI

[@jean-francoislafrance7213]

Thank you Shane! This wasn't what I was searching for but did solve a future problem we were going to have. The app we built will be used with a SQL database (approx. 300 users). Do you have a video on how to protect the data? How are those permissions set up, that kind of thing. Cheers and thanks again!

[@TheAsterii]

Hey Shane, thanks for the tutorial! Little off topic question maybe: How exactly can we figure out which actions consume what amount of API calls. You mentioned your concerns when querying the user images in the gallery. So I assume in this case it´s gonna be 1 basic read-call to query all the users, plus 1 separate call per user being returned just to get the corresponding user image, correct? I´m coming from the Power Automate world and now I´m more and more getting into Power Apps - so I´m (unfortunately) pretty familiar with the licensing struggles pertaining API calls and that it´s important to consider this aspect in the general architecture. Again, great video!

[@ShanesCows]

Take a look at this video kzbin.info/www/bejne/sHqxhXSLf9aEnsk where I show you how to use Monitor. Good news Power Apps doesn't have as many issues as flow does with the API stuff. Power Apps just gets slow if you are calling too much data.

[@florianzimmer513]

Thanks a lot @@ShanesCows. Sorry, posted this comment being logged in another YT account. Thus, the late response. Great stuff, thanks so much!

[@syedhussain6393]

Can i share or unshare app to AAD users from with in canvas app?

[@ShanesCows]

Not that i have seen but haven't looked.

[@rosiedjurovic]

Hi Shane, great video. A heads up for anyone who is building something similar to me - this does not work for guest users.

[@ShanesCows]

Thanks for the info!

[@tranminhtri2811]

Can you make video of power automate how 1 external app, Web... (not power apps) can POST, PATCH,PUT, GET my data in sharepoint List? And about the token mechanism JWT also. Thanks my guru!

[@ShanesCows]

You would ahve to call the SharePoint REST API from the external app. Not something I have done but very possible to do.

[@denniswarren5871]

Create Security Group feature turned off in my org.

[@ShanesCows]

Sorry contact IT and tell them to give it to you. 😁

[@LCXavier]

Hi Shane, great video! Is there a way to add someone as the "Owner" of the security group? The actions that we have only add as "Member". Thank you so much!

[@saurabh08ful]

Hi Lucas, did you find any solution for this?

[@shellybarrett2960]

You showed in your video the ability to remove people from the group. Can you share the code to perform that action? Also is there any issue if a user tries to add the same person to the group because they didn’t see the user already in the group?

[@shellybarrett2960]

Disregard the first part of removing. I was able to screenshot at 7:42. Thank you for this video. This is exactly what I was looking for.

[@JFrailey]

A note here for anyone having privilege issues to update members of the AzureAD (Entra ID) security groups. Your groups can't be enabled with the property "Microsoft Entra roles can be assigned to this group" without going through Graph API to enable this. I found it easier to just not have this enabled in my groups I was using.

[@JFrailey]

Error: "Authorization_RequestDenied insufficient privileges to complete the operation user is an owner of the security group"

[@chihungngai3065]

Thx ! It is a nice sharing

[@chihungngai3065]

I have a similar issue, but hope u could give me a help. I m the user and also a data owner of a company to manage oir business [global] , unfortunately we take the advice of i.t to hiring an external vendor to install dynamic 365 [our i.t team has no knowledge of it] after 1 year, and spent all our money budget , everything was bad, no feature except the input of record. They even told us no calculation features, no grouping, everything build was raw, no power bi can be used , need to user other third parties app they suggest for analysis purpose, but building a new analysis tool re required more money, so after one year. Everything are suck. I hope i can help abit to fix some stuffs [ but i.t always find a excuse said user will break it, you can ask what data u need every time,. I will consider to give it to you.,we are having a hard time ] Sorry for the lomg story, but i am allowed to access and edit information in dynamic 365 sales app, but when i go to powerapp, i can only see my developer and default environment ], they said they add me a customize admin, but i still coudlnt see the environement, and not be able to use lots of features, do we have somethng silimar method can get me back to powerapp? [ I m the data owner and the users who can access the full data] i only want to edit some view, dashboard, make some workflow is fine... We can wait a month and pay for each edit of view ... Many thanks. Look forward to your reply

[@mavisqing9444]

Thanks for sharing

[@ShanesCows]

Thanks for watching!

[@arijzafar564]

Great vid thanks for this.

[@ShanesCows]

Glad you enjoyed it

[@robinrosengrun3634]

Sounds AWESOME! But somebody turned it off in my organisation 😥

[@ShanesCows]

Boo!

[@nanogongolo]

simply great!

[@bgergoe]

too bad O365 groups can't be used with Power BI...

[@ShanesCows]

Would be nice if they were more usable.

[@sivannadurai]

How to Change Role(Member/Owner) for userprinciple using power appsOffice365Groups.AddMemberToGroup

[@sivannadurai]

Thank you Shane! ,How to Add Owner to Office 365 Group using Power apps