Dynamics Community Forum Thread Details

Additional Power Platform environment - users in assigned security group not added

Hi, Actually we just wanted to create an additional environment with certain connectors for some specific users. The environment was created without CDS. The environment has a security group assigned as Environment Makers so only certain users get the environment.

Worked fine so far.

THEN - the users started to create Flows and used the "Approval" connector they got this error message that no CDS database has been created in this environment.

Forbidden. The request failed. Error code: 'CdsUserDoesNotHavePermissionsToCreateDatabase'. Error Message: 'The current user does not have permissions to create a Common Data Service database for this environment. Please ask an environment administrator to create the database.'.

So I created a CDS database for this environment and with that my headaches started.

Why, why, why does it need to be sooo complicated just because we want to use Approvals (and not the whole other stuff for CDS...)???

I also assigned the security group to the CDS. As far as I understand whenever a user is added to the security group the user should also be added to the CDS as "Enabled Users", right?

Unfortunately the users are not added to CDS. I only see the admins. I hope I don't have to add each user also manually to the CDS as users. Would not make sense for me and would make maintenance and users who should use the environment ridiculousness hard to maintain.
According to: <https://docs.microsoft.com/en-us/power-platform/admin/add-users-to-environment> it can take some time - how long? Waited more than 48hours and no users there...
The users meet the requirements (Enabled in AAD, have an active license (E1/E3 with Common Datatabase enabled, Member of the assigned security group)
Forward looking question - when the users are created/added to CDS, is there something additional which needs to be done that users can create approval flows? Are the users automatically assigned to the "Environment Maker" security role in CDS or the "Common Data Service User" security role? Are they required?

Thanks for any help or clarification.

Regards,

Stefan

Quick Links