Views:


Applies to Product - Power Platform Administration

What’s happening?
The "DoNotRemoveRolesOnChangeBusinessUnit" setting is not functioning as intended, resulting in the removal of security roles from users when their business unit is changed, despite the setting being configured to prevent this.
 

Reason:
The roles are not actually removed; however, the legacy user interface does not display the old roles because they belong to a different business unit. This behavior is by design.
 

Resolution:

  1. Ensure that the "DoNotRemoveRolesOnChangeBusinessUnit" setting is set to true.
  2. Verify that the "EnableOwnershipAcrossBusinessUnits" setting is also enabled, as this may affect role assignments.
  3. Use the Power Platform Admin Center UI to manage user roles instead of the legacy UI, as it provides accurate information regarding role assignments.
  4. To view existing roles assigned to the user, utilize the PPAC User Management feature.