Just Genius!! How come, every time i am stuck in powerapps, it is your videos that solves the problem. I am disappointed that youtube allows us to like a video only once.
Simple and sweet all we need to know is how to play with existing old school stuff, but I can clearly see your extensive experience and exposure to come up with this solution. Great video Reza... !!
LoL This video literally kept my at the edge of my seat... I had used the list approach, and even a flow to check via sharepoint API if an user/email is part of a sharepoint group. This trick is just fast and honestly, plain brilliant. I hope the bug in the Datasource info function gets fixed... One of these days...
I had a customer ask for this last week. I didn't have time to research but after I saw another of your videos, I subscribed. Then I saw you have done this and I knew i subscribed to the right channel! Thank you for all your hard work!!!
I can't say how much I am thankful for this video, I have learned a lot from the video, simple and easy to understand, I am a new beginner, it is helping me day by day
Reza Sir ..This is super simple approach..thanks for sharing .We implemented same using list & flow you explained earlier which was somewhat complicated.Thanks again.
I have an access control list for the limited number of technicians we have and it works like a charm. On the list I have a column for the app name, if the user is active or not, their role, and the app mode. Works brilliantly. And I have four apps accessing this access control list. Each have their own specific roles.
This is genius, I have implemented it and it works great. Do you expand on this video to show how to filter if you put list items in for multiple departments in the same list?
@@RezaDorrani I have AD Connect running with all the department groups already set up for our Intranet SharePoint Site. I Didn't think of that...will definitely check that out, it would save so much time. I've implemented your security trick this morning and it works great. Also for filtering a drop down menu. To get rid of the delegation warning I collected the Security list and work from there. Thanks again!!
Thanks! I am not aware of any options to do that. I would recommend checking or posting your query on forums in case someone has done something similar powerusers.microsoft.com
Thanks Reza, i was wondering why i am only getting solutions to check for O365 groups and not Sharepoint groups.My site is not connected to O365 so i was wondering what i am missing till you said it that there is indeed no direct way to access SP groups from canvas apps.
@@RezaDorrani yes indeed, thanks alot. Chcking O365 group linked to my team site does not help because still we cannot distinguish between Owners, members, visitors part of o365 group. So your solution is perfect for me.
Thanks a lot for this great tip. In my case I have a sharepoint list of system owners and Through my app, I am performing CRUD on that list to add or remove owners however for the new owners to use the app, they must added to a sharepoint group. I would like to achieve this via power app when adding the owner maybe add checkbox to add him/her to the sharepoint group at the same time. Is that possible?? or any work around to achive this securely. Thanks!
I do not have a video reference on this scenario and would have to try it out to know its possibility. I recommend checking on the forums at powerusers.microsoft.com/ in case someone has done something similar.
Great Video! I saw a few other videos which were in the direction of using Power Automate to check if user is present in a SharePoint group, but i think your approach saves us a call and is a better. Quick question: Would this have any performance related problem if we have a lot if people within the SharePoint group that i am checking ?
Performance wise it would be the same with respect to breaking list item permissions in a SP list. The more users you have, the more checks it would need to make. I recommend creating an AD group, adding all users to that group and then add the AD group to the SP group. That ways it would require less manitenance on the SP side.
This one really got me thinking. Getting members of a SharePoint group (specifically one that is not tied to an Office 365 group) is really interesting. I do have a solution and I think I will blog about it :) Stay tuned!
Great Work. Do you know how to retrieve the group members from a particular list items. For example, Employee list can access by person A and person B. Inside the Employee list has 2 items the first item can only access by person A. How can I get the members who can access the first item ?
Thank you Raza for a great workaround. It worked fine for me but I get an error message for non-admin users when lunching the app, even though the app works fine for them. The error message " Error when trying to retrieve data from the network: Access denied" and they only see their items as they suppose to. Any idea why this was happening?
I have not come across this issue and hence not sure what is the cause for your issue. I recommend posting your issue/query with screenshots on the forums at powerusers.microsoft.com
Awesome Explanation!! Need one help. In my case, i have used one SP list called “Owner”, in which 2 email id is present under “Title” who can access particular field in form but for other user fields display mode should be disabled. What code i should write
I would have to try your scenario out to give u the code. I would recommend you post your query with screenshots on the forums at powerusers.microsoft.com
Hello Reza, Nice and simple video, I have little complex scenario, where there are 8 tabs for 8 different Groups in Org (i.e groups HR, Legal, etc..), need to implement the security using this approach, how to check this on App start?
Love the solution! I have an issue that a site owner not included in the SharePoint group can see the item in the list even though I have removed site owners from 'Manage access' list.. Perhaps someone could advice if Owner access is hidden somewhere else?
Which site template are you using for SharePoint site - Communication or Team site? In a team site, the owners group are also site collection admins and hence they will have complete access on all artifacts.
This scenario purely deals with SP groups which is handles the core security logic for Comm sites. For Team sites the security is managed via O365 groups. There is an O365Groups connector available where you can check if user is member of that group.
@RezaDorrani if in this example there is isAdmin and isValidator, and both those groups have been given access to their corresponding group name items, can you share how I write each in onstart. Do I filter by the group name (used as the item name) in the access list?
Hi Reza, I followed all your videos, can you please refresh if you have this kind of functionality, I have the following field and use case besides 1. people group field - contain multiple user accounts(display as name) 2. Textfield - logged user field(display as name) 3. Textfield1 - display the name here in this field if the logged user is present in the people group field Thanks and take care
I would have to try out your scenario to provide any guidance. I would recommend you post your issue/query with screenshots on the forums at powerusers.microsoft.com
@@RezaDorrani Hi, I have done that. In powerapps how do I diferentiate that name as in a list it contains multiple items Eg: abc is a item and abc permission is given Xyz is another item and xyz permission is given Now on the app start how to add both Can you given an example of it If you have a video of it will be grateful to go through.
@@leenashreeindrani532 Give a unqiue name to each item in the list. Then in Power App, use Filter(listname, Title ='item unique name') and then check its count.
Hi Reza, As suggested I have written as below Set(isAdmin,If(CountRows(Filter(Security,Title='Owner Group'))>0,true,false)); Though I am part of SharePoint groups it returns false. Can I get your number to contact on this please...
Hi Reza. Just wondering, if the bug with DataSourceInfo function and Sharepoint as data source fixed as of now? Is it now possible to use? Thanks in advance. More powers!
Many thanks! What if one is required to email the list of people in one of these groups? I usually create a list of security groups, including members, and in flow, get the name of the users this way. How can one grab the users from the security group in flow?
Hello Reza, I have a question regarding item level permission and already existing groups in SharePoint. The situation is like described below. I have 4 users ex. Tom, Marry, John, Jack. Earlier I created two groups A(Tom, Merry) and B(John, Jack), those 2 groups uses 1 list, and I what I want is to allow Merry to have permission to Items created by Tom, but she couldn’t see items created by group B (John, Jack). Is it possible to achieve this? My frontend is a PowerApp.
Not sure about that since I have not tried it. I will recommend checking on the forums at powerusers.microsoft.com/ in case someone has done something similar.
Hello sir, howyour logic will work if you are deciding only on count, and it will not work if you have more than 1 group.e.g: if you show some resources to one group, you add that group in LIST, but if you need to show some other resources to other group, you will have to add that group in LIST but you have to hide the first resources from groupB. than how could you handle it? it will also throw the count>0 for first resources
Permissions are being assigned at an item level in the list. You can also use the Title column of the list to define the group. Item 1 - Title = Group A, item permissions only to Group A Item 2 - Title = Group B, item permissions only to Group B In Power App check for combination of Title and row count for each group.
Cant I just check if the person is in the group or not, Why should I need to create a list and then create a restricted access item for this to achieve. There should be a way to directly access the group from powerapps.
Hi Reza. At 9:16 you can see that this user cannot see the list item you created, but can CREATE a new item . This would break the CountRows validation in the app wouldn't it? If the non-admin user knows the list URL and can create a new item, he would automatically have access to an item, and thus get a CountRows of at least 1. Would you break permission inheritance on the "Help Center Admins" list or is there another way?
Each list item is unique. You could use the ID column in SharePoint to only check for that specific list item. Even if user creates one, it would not be queried in the Power App. The video also shows a query being performed for a specific list item.
I need to set a group of people with certain permission level to add items only without add/ create new view can you please advice ? thank you ,,, I already set a public default view with filtration of created by [Me] so every one with the link can only see his own items ... the thing is when I grant them the access on the level of permission I need they will not be able to open the list and they got request access page ! ... this is so wired please help! & when I give them directly a contribute permission they are able to create a view I need your advise please
To get group members, you would have to call a flow from Power Apps, use the http API to get group members and return that info back to Power Apps. The technique showcased in the video does not require flow.
Hello Reza..I have one requirement where I have to check user from 1st Approver Collection ....if user is from that collection then move to second approval code in powerapps.If user is from 2nd Approver Collection then no need to go for any approval code.
I do not have a video reference on this and will need to try it out to provide guidance. I will recommend checking on the forums at powerusers.microsoft.com/ in case someone has done something similar.
@@RezaDorrani thank you for reply. I raised this question in PowerApps community also but didn't get any response from there.I figured out that I need to check user().email on Submit button of form to check whether the logged in user is from Approver collection or not but stuck at implementation because for other users with read permission powerapps code is working correctly but I need to alter for approvers(contribute permission).
@@hemlataharwani9404 Forums is a free platform. You may or may not get a response. You will need to wait patiently for a response. It could take days or weeks. If it’s urgent, then you may need to look at getting consulting help.
@@RezaDorrani yes I am waiting for the reply and researching as well actually I am beginner in powerapps and doing this for learning purpose...thank you for all the videos..they are great help.
You need to set the permissions for each item (item level permissions). Give each list item a unique Title. Query for the title in Power Apps to check if user is part of group.
This solution worked, sort of, but I have a problem. For a user that is not in the group that can't see the Security List it gives and error when I run the PowerApp every time. It gives the error when it tries to populate the IsAdmin variable. It does work if after you close the error message, but obviously I don't want every non-admin to see an error message everytime they run the application. Thanks for your help!
There should be no problem. Everyone should have read access to the security list. Key is to set item level permission on the list item. So when we check to see the item count within the list - it would return as 0 for users who dont have access to the list item.
@@RezaDorrani Thanks for the really quick response. I'll re-watch the video and attempt get this set up correctly. As a side question, do you know if there is a way to check to see if a user has certain access to a SharePoint List? I saw another video suggesting to use the DataSource, but I believe you said this was worthless when SharePoint holds your data. Correct? Thanks again for the help and posting the video.
Subs Guts The DataSource object does not work for SharePoint. For checking a users access to a list you would have to do a little bit of error handling in case the user has no access.
While users (who was not admin and cannot access Security MS List file ) open the App on mobile phone , they will see warning massage pop on top screen like "something wrong with access/connection with the Security (ms)list file". Could we do to ignore or prevent the warning massage as mentioned ? Thank you.
Wow! I guess I am the only one this doesn't work for. I followed this to the letter. I created a new list and added the name of the User Group in the title. I then added only those individuals, including myself, to the user group. I then created unique permissions on the list and remove all the other user access groups (unfortunately this is a sub site and so the Site admins also have access and I cannot test this because I am a Site Collection Admin) . The Long and short of this is... When I go my SharePoint Power Apps form (custom form for SharePoint List) and add the date source, and put the function in the SharePointIntegration start, I get 'false' for isAdmin. I have refreshed the data, and rerun the start, still false for me. I am in this group, I can see the item in the table, it should be true.
I am having a similar issue. I stead of showing the button for an Admin, I am hiding an Edit button to Visitors. I switched the true and false, but the Visitor is still seeing the button.
Tested this on a subsite and it works fine. Followed the steps in the video and got it to work. Make sure the list item you create in the list has permissions broken and security setup correctly.
Tested this on a subsite and it works fine. Followed the steps in the video and got it to work. Make sure the list item you create in the list has permissions broken and security setup correctly.
Should check the user belongs to which group in a particular site and if I want to give access then add that user into particular SharePoint group, If I want to revoke that user then I should remove in that particular group
@@palikaanusha3043 I do not have a video reference on this scenario. You would probably need to use flows to do all this. I would recommend checking on forums in case someone has done something similar powerusers.microsoft.com
I know this video is old, but you should avoid teaching "If( someCondition, true, false)". Instead, you should just have this: Set(isAdmin, CountRows(Security) > 0). This is cleaner and teaches people to better understand booleans.
