web
You’re offline. This is a read only version of the page.
close
Skip to main content
Community site session details

Community site session details

Session Id :
Service | Customer Service, Contact Center, Fie...
Suggested answer

Notes URL security in Powerapps Portals: https://site.powerappsportals.com/_entity/annotation/

(0) ShareShare
ReportReport
Posted on by 5

Can we secure the Notes URL access in Powerapps Portals: https://site.powerappsportals.com/_entity/annotation/<noteGuid> from direct URL browsing in case of Notes Entity Permission enabled to Global.

It should be accessible to public inside the website but NOT from outside the website. Any CORS /Other setting help?

I have the same question (0)
  • Suggested answer
    oliver.rodrigues Profile Picture
    4,052 on at
    RE: Notes URL security in Powerapps Portals: https://site.powerappsportals.com/_entity/annotation/

    We highly recommend users to migrate to PowerUsers community for new Portal questions:

    powerusers.microsoft.com/.../PowerAppsPortals

    Hi, does the anonymous user need read privileges? you can have the anonymous just writing and not reading in your entity permissions

    ------------

    If you like this post, give a Thumbs up. Where it solved your request, Mark it as a Solution to enable other users find it.

  • Community Member Profile Picture
    on at
    RE: Notes URL security in Powerapps Portals: https://site.powerappsportals.com/_entity/annotation/

    Hi Madhu,

    The url that you don’t want anonymous user can access should in one page, so you can assign

    Authenticated Users’ web role to the page as I mentioned above.

    https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/webpage-access-control 

    Regards,

    Leah Ju

    Please mark as verified if the answer is helpful. Welcome to join hot discussions in Dynamics 365 Forums.

  • BABU M Profile Picture
    5 on at
    RE: Notes URL security in Powerapps Portals: https://site.powerappsportals.com/_entity/annotation/

    Thank you Leah.

    In our case,  an anonymous user need to upload a document to a form(entity).

    After user uploaded a document, we need to secure this attachment from accessing anonymously with url _entity/annotation/<noteGuid>.

    Can this be control with session / any other settings?

  • Community Member Profile Picture
    on at
    RE: Notes URL security in Powerapps Portals: https://site.powerappsportals.com/_entity/annotation/

    Hi Madhu,

    You need assign ‘Authenticated Users’ web role to this note entity permission which make unauthenticated users can’t access the entity records.

    you can refer following link to know more about web role.

    https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/create-web-roles 

    1.One way is adding web role to the entity permission.

    Go Portal Management > Entity Permission to click one permission for the entity you need.

     pastedimage1609147745352v1.png

    pastedimage1609147858839v2.png

    2.Another way is adding entity permission to the web role.

    Go Portal Management > web Role

     pastedimage1609148196627v3.png

    Two ways has the same result, you can select either of these two ways.

    Also, you can access web role to the page or website to control the access to the portal.

    https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/webpage-access-control 

    https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/website-access-permission 

    Leah Ju

    Please mark as verified if the answer is helpful. Welcome to join hot discussions in Dynamics 365 Forums.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Andrés Arias – Community Spotlight

We are honored to recognize Andrés Arias as our Community Spotlight honoree for…

Leaderboard > Service | Customer Service, Contact Center, Field Service, Guides

#1
Abhilash Warrier Profile Picture

Abhilash Warrier 100 Super User 2025 Season 2

#2
Suresh Kulla Profile Picture

Suresh Kulla 72 Super User 2025 Season 2

#3
Daniyal Khaleel Profile Picture

Daniyal Khaleel 55

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans