Why can't a new user with a New Role see the published model-driven app?

(0) Share

Report

Posted on by Joseph Nasr

183

Hello,

We are working on new roles for a new test user called CRM User. One of the new roles is called 'CEO - Company X'

when I assigned a new role to 'CRM User', the user could not see any published app (we have a published model-driven app for every BU)

1) In the app's manage roles, I can only see roles of the Parent BU.

2) So, I created a custom new role ('CEO - Company X') for the child BU (Company X), and I can actually see it in the app's 'Manage Roles' to assign it to the application, but still the user cannot see the published application.

3) Also, when setting privileges for the role, I did check the Read privilege of 'Model-driven App'.

What's strange is that if I assign to that User the role System Administrator, the user can see everything again. Correct me if I'm wrong, but I don't think it is a License issue, even though the user only has 1 License: M365 Busniess Basic. I really appreciate any help because we have a lot of roles in a complex hierarchy to create.

All responses (3)

Answers (1)

Suggested answer

Sayen Zhang on at

Like (0)

Report

RE: Why can't a new user with a New Role see the published model-driven app?

Hi Joseph,

Thank you for your information.

It confirmed that CRM User has enough permissions and license to access the published model-driven app.

CRM User will see the published model-driven app from the shared app URL: https://learn.microsoft.com/en-us/power-apps/maker/model-driven-apps/share-model-driven-app#share-the-link-to-your-app

Have you tried to see the published model-driven app from CRM User's environment? If so, he cannot see the app because there is no Dynamics 365 app in his environment.

By default, users who have only the Basic User security role can only access model-driven apps that have that security role assigned to the app.

However, users who have the Environment Maker, System Administrator, or System Customizer security role can access and edit all model-driven apps within the environment.

Here is a reference link: Privileges required to view apps in Power Apps - Power Apps | Microsoft Learn

Best Regards,

Sayen Zhang
Joseph Nasr 183 on at

Like (0)

Report

RE: Why can't a new user with a New Role see the published model-driven app?

Hello Sayen,

Thank you for trying to help. I followed the steps you mentioned, and the results were the following:

1) I went to admin.powerplatform.microsoft.com/.../ and picked the right environment.

2) CRM User is in fact, in the Users List.

3) I went to the app access checker, and the apparently CRM User has: Visible: Yes, License: Yes, Security: Yes.
Verified answer

Sayen Zhang on at

Like (0)

Report

RE: Why can't a new user with a New Role see the published model-driven app?

Hi Joseph,

Hope you are well.

Can you please try below steps to check CRM User's ability to access Dynamics 365 Apps?

1. Go to https://admin.powerplatform.microsoft.com/environments/ and pick the right environment.

2. Click See all under Users.

3. Check if CRM User in Users list.

4. If not, add CRM User and then access published Model-driven app again. If exists, click app access checker, enter CRM User's email address and click Search.

5. After a moment you should see all of the published Model-driven apps in the environment, we can check user's security and license from there.

6. We could refer to following links if we lost security or license:

Checking User Access To Model-driven Apps (D365 CE) - Megan V. Walker (meganvwalker.com)

Assign licenses to users in the Microsoft 365 admin center - Microsoft 365 admin | Microsoft Learn

Best Regards,

Sayen Zhang

Please mark as verified if the answer is helpful. Welcome to join hot discussions in Dynamics 365 Forums.