PowerApps Bypass Consent PowerShell - Allow Connections

[@jenskemeijs]

Dear Shane, With great pleasure I already watched your PowerShell video's on KZbin. I would like to learn a lot more about them. Since your video's are so clear and fun, of course my preference would be to be teached by you! So yeah, I would love to have more of these PowerShell trick videos! Kind regards, Ms. Meijs 😉

[@ShanesCows]

You are awesome!

[@coolname-pf2xh]

For me, environmentname also needed to be passed as parameter. Worked after I did it. Copied the environment name from the URL after going to admin center. Thanks, Shane!

[@ShanesCows]

Thanks for the update. :)

[@RahulKumar-rv5uw]

Hi, Can you explain a bit more. I couldn't find environment name. There was no environment in admin center.

[@coolname-pf2xh]

@@RahulKumar-rv5uw it's part of the URL check after the "/"

[@clawhan4244]

This was the bane of my apps... thank you Shane!!!

[@ShanesCows]

Glad to help!

[@louismartini6983]

VERY HELPFUL Shane. Wish I was a global admin. Guess I will have to find out who that is and take them out for a steak and share this video.

[@ShanesCows]

Love it 🥩

[@kishorec1117]

Life savour.. seriously..thanks Shane so much!

[@ShanesCows]

Glad to help

[@nharzic9248]

Thanks as always, Shane. Really helpful tip. Side note, I tested it and when I tried to clear the AdminPowerAppApisToBypassConsent with the app open in edit mode, it failed and gave me an error. So you do need to not be editing the app when you do this.

[@ShanesCows]

Correct. I meant to note that in the video and forgot. Boo me! Thanks for the reminder.

[@dannyhometown]

This one is really helpful. Thanks Shane.

[@ShanesCows]

Awesome!

[@NarnawareSunil]

Hi Shane.. This is awesome.. Quick and Easy.. However I have question.. what if we have a connection which uses service account? Will it also bypass this connection for all the users? So to give you a brief.. I have a Todoist Connector which I use using service account.. now if I set Bypass consent.. will it ask me to use service account for Todoist Connector once and then it won't ask again for all users?

[@ShanesCows]

Not sure. You will have to test it and report back.

[@Phyrra]

Quick question about Power Automate. When you are building an automated flow, is there a way to 'pin' the most common triggers you use to the top? Or for the dynamic content?

[@ShanesCows]

Not that I know of

[@Phyrra]

@@ShanesCows thank you for responding. I went and suggested it over at the power automate forums. BTW, your videos have been incredibly helpful for me as I just started a position where I utilize these tools daily.

[@cazillo]

I'm guessing this is a per tenant setting and won't work on apps deployed via Solutions? Also would be great to see some vids on how you use Solutions to deliver apps to your clients.

[@davediguer]

Thanks Shane - Really appreciate all your videos - they are amazing. idea for a video - how to manage Connections / Connectors in power apps. I seem to have multiple connections in PowerApps with the same connection / account. I would like to clean them up, but not sure how to get rid of the duplicates .

[@lindakeefe6920]

Great video, Shane. I am not an admin so you are right...BOO! Thanks for dropping that knowledge though.

[@ShanesCows]

Bummer 😎

[@luciatoia1623]

that's fantastic. Really helpful 🙂

[@ShanesCows]

Happy to help. Have a great day. 🐶

[@TacticsBI]

Cool Shane thanks! Do you have video on connecting to SAP BW from power app

[@ShanesCows]

I don't. SOrry.

[@evanhardin]

Bypassing the Allow screen caused an error in our system. Some users had connections that needed to be fixed because of some alias issues. Bypassing the Allow screen prevented them from seeing the fix connection option and they got into the system with broken connections causing all sorts of issues.

[@ShanesCows]

I can see that for sure. They would need to go manually to the Power Apps screen to fix them. 😐

[@vladlapets7650]

Hello Shane, Thank you for the video! Do you know if it's possible to bypass custom connectors or there is another way to do it? Thanks!

[@ShanesCows]

Not that I know of

[@rickgosden5699]

Thanks Shane, nice walk-through. I have a question regarding the actual permissions: If someone sends me a link to a PowerApp, how can I check what it does before agreeing to the requested permissions? E.g. the Outlook connector allows full access to my Outlook account, so how can I know the App can be trusted not to skim my emails etc.?

[@ShanesCows]

I don't think you can :(

[@Asian_Import]

Hey Shane, I installed and ran the commands no problem, even returned status code 200. However, users are still being prompted to give consent to the SharePoint connector. Any idea why this may be, is SharePoint no longer covered by this method?

[@dominicgraytechnology]

Same in a our and a colleague's firm's environment - some apps work, some do not. Submitting bug request to MSFT

[@arshiyafatima7188]

Hello shane…Thanks for the wonder video.. can you please help if you have any reference for workflow 2013 report generation using powershell

[@ShanesCows]

I don't, sorry.

[@chovp8405]

Hi Shane, it doesn't work for the connector in Custom Pages. Or is there another alternative?

[@stefancochrane2723]

Many thanks, Shane! Unfortunately, this annoying and confusing "Allow" dialog is a showstopper for us. Most users have been taught to be wary of unexpected and vague dialogs, and because of that, most users will not click "Allow". In our case, we have a customized form for an SPO list and all connectors are to lists in the same SPO site. Users already have access to all these lists, so why would they need to "Allow" if they are already in the SPO site? The only difference I can see is that the PowerApps form and SPO connectors are signed with a service account who has site collection admin to the site. Hopefully, the global admins can take care of this in the next few days. Thanks!

[@ShanesCows]

Yeah, the Allow thing is super annoying. Good luck getting them shutdown.

[@stefancochrane2723]

@@ShanesCows Many thanks! Our internal "Power Platform" team got the ok from cybersecurity, so they removed that pesky dialog from my app. 😄 A colleague of mine said that his users are "used to it", but is happy to know there's a way to get rid of the dialog. I recommended to our internal M$ team to get rid of this for all PowerApps (incl. SharePoint forms). We shall see... It's too bad we have to be global admins to remove this instead of just updating a setting in PowerApps. Thanks!

[@justinpage4905]

This is great. Thanks! Does it also work for Canvas Apps customized directly from SharePoint?

[@ShanesCows]

I don't know... I would assume yes but never tried.

[@janineboza165]

Dear Shane, I am unclear in the scenarios when to request the Admin to run the bypass consent for me. Could you please clarify when you need to rerun the bypass consent on the app? Is it #1 whenever we update a power automate flow with no new connectors or #2 just whenever credentials change in the flow or #3 whenever you save flow changes with new connectors? Thank you!

[@ShanesCows]

Janine - I am not sure what, if any, of those scenarios cause you to need to rerun. Sorry, haven't had to rerun.

[@AndyLe-r7o]

Hi Shane, any idea how to remove a specific permission in a connector ( i.e.. remove the read/delete/edit permission of Outlook 365, only keep the "send" permission)? Thanks

[@ShanesCows]

I don't think you can Andy. Look at this documentation. Some connectors, support some permissions but not all. learn.microsoft.com/en-us/power-platform/admin/connector-action-control

[@nvs-power365]

But we have to do this, every time we publish new version. Any possible way to avoid that? and set for once

[@ShanesCows]

This is the best that I have got.

[@Cookies2069]

Thank you @shane. But please this command is not working for my approval connector. Any help will be greatly appreciate

[@caraziegel7652]

Ever since my lead did some stuff with my app while moving it into QA, i have to click 'dont allow' because it wont let me click allow, it says no data was found

[@ShanesCows]

Yikes. That is a new one to me. 😔 Hope you get it sorted.

[@Philzy610]

When I run the Set-AdminPowerAppApisToBypassConsent command, I get a prompt to enter EnvironmentName, unlike in your video. When I enter the environment name, which I know to be correct, I get an error message. At first I couldn't run Add-PowerAppsAccount due to an error message that the internet had me going down all manner of rabbit holes to fix. And now this. It's just one issue after another trying to change a darn setting, which should be simple to do.

[@wilhelmbenedictos555]

Hi Shane, I'm not sure if this is a dumb question for you or not, but here it goes. I am starting my career as a Power Platform Developer, I learned a lot from my colleagues and your videos. Now, I just got a 50% off voucher for Power Platform App Maker Associate certification, and another voucher for Power Platform Fundamentals so everything looks good. But something is bothering me, I keep on asking myself if this is a good career to focus on or not. Do you think Power Platform is a good career? Do you think Power Platform will still be around 10 years from now? Do you think Power Platform Developers will still be in demand a few years from now? I am basically stuck between choosing to stay in Power Platform or choosing another path like Data Analytics or maybe continue web development. Thanks in advance

[@cvkealey]

This sounds great, but I'm assuming it would not work for users who don't have a "connection" configured? For example, I build an app that uses SharePoint and the Office 365 Users connector, then run this command to bypass the consent message. User A has been around a while and used other apps or flow that use those connectors, so already has their connections set up. Use X is new to the org and has never used any apps or flows, so they don't have any connections established. User A will be able to use the app without a problem, but User X will?? This is what I'm unsure of. Will the connections get created in the background (I suspect 'no' since they're not prompted to authenticate in any way)? Will the app open but not work (because they don't have any connections - this is what I *think* will happen)? Will they be prompted to create the connection the first time they use the app, and if so, will that experience be the same (for them) as if the powershell command had not been run?

[@ShanesCows]

I am not sure Chad. I would hope it would work. Guess you will have to try it out and let us know. 😀

[@cvkealey]

@@ShanesCows I guess I need to dig up the credentials for my dev environment so I can play global admin.

[@cvkealey]

@@ShanesCows I only tested with one account and one connector (SharePoint) and the app opened right up with no prompt. When I checked the user's connections (via the Power Automate site), it appears that the connection was created without any user interaction. That's pretty cool, but from a privacy perspective, it could be concerning. Without that "legal consent" process, a user could come back later and say they never agreed to let the app access their SharePoint (or Outlook, Teams, etc.) information. Still, we build quite a few "read only" type apps where this might be useful (if I can convince our global admins to run the command for me).

[@boomburst8]

Does anyone else get a prompt saying that you need to supply a value for an Environment Name when using the Set-AdminPowerAppApisToBypassConsent command? I found an article that led me to the Power Platform Admin Center, but there aren't any environments there, so I'm not sure what it is expecting.

[@ShanesCows]

If you have the URL you use for the app in a browser the first part of the URL is the environment guid you need.

[@boomburst8]

@@ShanesCows Ah, now I get what the other comment about the Environment was referring to. Thanks!

[@Salstravels]

How do I bypass the step of logging in with my credentials? Thanks!

[@ShanesCows]

Your browser should be cacheing your login, I rarely ever am prompted to login.

[@Salstravels]

The credentials window pops up every time I run the PowerShell commands in power automate desktop.

[@Salstravels]

@ShanesCows I am trying to further automate it by running several PowerShell commands in Power Automate Desktop to reduce as many clicks as possible.

[@sundrapillay6668]

Thank you Shane

[@ShanesCows]

Happy to help Sundra!

[@teemplaya]

Hi, after hitting enter, I was prompted for my EnvironmentName. Then, after going to Power Platform admin center, clicking on Environments, then clicking on the name of my domain and pasting the 1st part of the Environment URL, I received an error in Powershell that said "The environment could not be found in the tenant". Can you help?

[@lunabaalbaki3169]

I ran the code but the PowerBi connector notification still appeared. Any ideas on how can I remove the powerbi connector notification?

[@koutlaw30]

How do you create a group that will allow you can share your app to multiple people rather than selecting one person at a time in the user interface?

[@ShanesCows]

You have to create a security group, not an Microsoft or Office Group.

[@stroutt2006]

@@ShanesCows you should make a video about turning security on for an O365 group as it does allow apps to be shared using them once that has been configured. Really helpful!

[@AlimMemon]

For me, it leads to the below right after I press enter to consent to the bypass. Please advise. I put the environment name it shows on my powerapps but it says the environment couldn't be found. Also, I was logged into the PowerShell as admin and have unrestricted access. cmdlet Set-AdminPowerAppApisToBypassConsent at command pipeline position 1 Supply values for the following parameters: EnvironmentName:

[@Asian_Import]

Hello, you actually need to enter your environment ID, not name (I know bad wording). You can find it the Power Platform admin center, or just copy the ID in the power apps URL after the "environments/" part

[@lownslow]

Does this work for the file system connector?

[@ShanesCows]

I don’t know.

[@RahulKumar-rv5uw]

Can it bypass AZureAD connector?

[@jccamp5584]

not successful on me I got error: The term ''Set-AdminPowerAppApisToBypassConsent'is not recognized as the name of a cmdlet ... ... .. what happen?

[@ShanesCows]

Did you install Power Apps PowerShell? kzbin.info/www/bejne/eIHQdIpnqr2baZo

[@jccamp5584]

@@ShanesCows ahhh i see i didn't install yet thank you so much shaneeeee 🙂

[@ericmild4050]

Very Cool...thanks

[@ShanesCows]

You bet

[@adrianlinge6285]

TNX!

[@ShanesCows]

Happy to help