Dynamics Community Forum Thread Details

Project Accelerator + Planner: Auto Assignment Security Role Granting Unintended Access

We’re facing a permission issue in Project Accelerator with Planner integration.

When Planner is used in Project Accelerator (by creating a plan and linking it to a Teams group), the Teams group is automatically added to Dataverse and assigned the “Project Team Member” managed security role from Project Accelerator.

This results in all users in that group getting access to the Project Accelerator app, which we want to avoid.

We tried removing the role, but:

It’s not scalable
Access becomes messy/inconsistent
When reused in another project, the role gets auto-assigned again

We can handle Project Managers via a separate security role, but the issue remains for Planner-based users.

Requirement:

Users should work with Planner tasks assigned through Project Accelerator
But must NOT access the Project Accelerator app

Reference:
https://learn.microsoft.com/en-us/project-for-the-web/enhance-project-for-the-web-projects-use-accelerator

Any suggestions to prevent this auto assignment or control access better? Thanks!