Dynamics Community Forum Thread Details

Question about Dataverse Web API

Question 1: Retrieving User/Team Access Rights for a Specific Record
Is it possible to retrieve a list of all users and teams that have access rights to a specific record using the Dataverse Web API?
My goal is to display a list of users/teams with access to a record on the record's detail page, showing what kind of permissions (read, write, delete, etc.) each user/team has.
Question 2: Bulk Sharing Records with Multiple Users/Teams
Is it possible to share multiple records with multiple users/teams in bulk using the Dataverse Web API?
I know this can be done manually through the sharing dialog in the UI, but I'd like to implement a solution that allows bulk sharing from a view/list page. I'm open to using Power Automate with custom connectors or Premium connectors if that's a viable approach.

Categories:

Power Platform integration

Good morning, afternoon, or evening depending on your location!

Answer to Question 1: Retrieving User/Team Access Rights for a Specific Record
Yes, you can retrieve a list of users and teams that have access rights to a specific record using the Dataverse Web API. The function RetrieveSharedPrincipalsAndAccessRequest allows you to fetch this information.
To do this via the Web API:

Query the PrincipalObjectAccess table, which stores sharing data.
Use FetchXML or an OData query to retrieve records where objectid matches the specific record ID.
Include related entities such as SystemUser and Team to get user/team details.

Example FetchXML query:
<fetch>
<entity name='principalobjectaccess'>
    <attribute name='objectid' />
    <attribute name='accessrightsmask' />
    <link-entity name='systemuser' to='principalid' from='systemuserid' alias='u'>
      <attribute name='fullname' alias='user' />
    </link-entity>
    <link-entity name='team' to='principalid' from='teamid' alias='t'>
      <attribute name='name' alias='team' />
    </link-entity>
    <filter>
      <condition attribute='objectid' operator='eq' value='{RECORD-ID}' />
    </filter>
</entity>
</fetch>
This will return a list of users and teams with access rights to the record, along with their permissions.
Answer to Question 2: Bulk Sharing Records with Multiple Users/Teams
Yes, bulk sharing records with multiple users/teams is possible using the Dataverse Web API. You can use the GrantAccessRequest function to assign permissions programmatically.
Steps:

Loop through the list of records and users/teams.
Use the GrantAccessRequest API to share each record with the specified users/teams.
If using Power Automate, create a flow that iterates through the records and assigns permissions dynamically.

Example API request:
{
"Target": {
    "entityType": "account",
    "id": "{RECORD-ID}"
},
"PrincipalAccess": {
    "Principal": {
      "entityType": "systemuser",
      "id": "{USER-ID}"
    },
    "AccessMask": "Read, Write"
}
}
This method allows bulk sharing without manual intervention.

Hope this helps!

Quick Links

Leaderboard > Microsoft Dynamics 365 | Integration, Dataverse, and general topics