Practice Lab 2.4 - Security roles
Scenario
You are a Power Platform functional consultant and have been assigned to the Fabrikam project for the next stage of the project.
In this practice lab, you will be modifying security roles.
There are three security roles in the solution:
- Environmental administrator
- Environmental manager
- Environmental user
You need to add privileges for the new Project Outcome table.
You need to adjust the Write privileges for the Milestone and Outcome tables on the Environmental user role. Currently, users can edit all records on these tables. Users should only be able to edit the records in their business unit.
You need to remove privileges for importing and exporting of data, deleting account and contacts, and add privileges for connection roles and audit history.
Exercise 1 – Modify the Environmental user security role
Task 1.1 – Evaluate security role
-
Navigate to the Power Apps Maker portal https://make.powerapps.com.
-
Make sure you are in the Practice environment.
-
Select Solutions.
-
Click to open the Fabrikam Environmental solution.
-
In the Objects pane on the left, select Security roles.
-
Select the Environmental user role and click Edit.
-
Select the Core Records tab.
-
Scroll down and see the privileges the security role has for the Core Records.
-
Select the Custom Entities tab.
-
Scroll down and see the privileges the security role has for the tables in the Fabrikam solution. Do not navigate away from this page.
Task 1.2 – Modify Milestone and Outcome privileges
-
In the Custom Entities tab for the Environmental user role, locate the Milestone table privileges.
-
Click on the Write privilege (third circle from the left) twice to change the access level circle to Business Unit.
-
Locate the Outcome table privileges.
-
Click on the Write privilege twice to change the access level circle to Business Unit.
-
Click Save.
Task 1.3 – Add privileges for Project Outcome
-
In the Custom Entities tab for the Environmental user role, locate the Project Outcome table privileges.
-
Click on Project Outcome name 4 times to change all privilege access levels to Organization.
-
Click on the Delete privilege (fourth circle from the left) once to change the access level circle to None.
-
Click Save.
Task 1.4 – Modify miscellaneous privileges
-
Select the Core Records tab.
-
Click on Data Import name 4 times to change all privilege access levels to None.
-
Click on Data Map name 3 times to change all privilege access levels to None.
-
Click on Import Source File name 4 times to change all privilege access levels to None.
-
Locate the Connection table privileges.
-
Verify that the Append privilege access level is set to Organization.
-
Verify that the Append To privilege taccess level is set to Organization.
-
Locate the Account table privileges.
-
Click on the Delete privilege 4 times to change the access level circle to None.
-
Locate the Contact table privileges.
-
Click on the Delete privilege 4 times to change the access level circle to None.
-
Scroll down to Miscellaneous Privileges.
-
Click on the View Audit History privilege to change the access level circle to Organization.
-
Select the Business Management tab.
-
Scroll down to Privacy Related Privileges.
-
Click on the Export to Excel privilege to change the access level circle to None.
-
Click on the Print privilege to change the access level circle to None.
-
Scroll down to Miscellaneous Privileges.
-
Click on the Bulk Edit privilege to change the access level circle to None.
-
Click on the Merge privilege to change the access level circle to None.
-
Click Save and Close.
-
Click Done.
Exercise 2 – Solutions
In this exercise, you will export the solution from the Practice environment and import it into the MOD Administrator’s environment.
Task 2.1 – Export managed solution
-
Navigate to the Power Apps Maker portal https://make.powerapps.com.
-
Make sure you are in the Practice environment.
-
Select Solutions.
-
Select the Fabrikam Environmental solution but do not open it.
-
Select Export solution.
-
Click Publish to publish all of your recent changes.
-
Click Next.
-
The version number should have been incremented to 1.1.11.6.
-
Select Managed for Export As.
-
Click Export.
-
The export will be prepared in the background, when the solution is ready click the Download button.
Task 2.2 – Export unmanaged solution
-
Select the Fabrikam Environmental solution.
-
Select Export solution.
-
Click Next.
-
The version number should have been incremented to 1.1.11.7.
-
Select Unmanaged for Export As.
-
Click Export.
-
The export will be prepared in the background, when the solution is ready click the Download button.
Task 2.3 – Import managed solution
-
Switch environments by using the Environment Selector in the upper right corner of the Maker portal.
-
Select the MOD Administrator’s Environment environment from the list.
-
Select Solutions.
-
Select Import solution.
-
Select Browse, change to the Downloads folder and select FabrikamEnvironmental_1_1_11_6_managed.zip and select Open.
-
Click Next.
NOTE: You should see a notification that the solution package contains an update for a solution that is already installed.
-
Expand Advanced settings.
-
Select Upgrade for Solution action.
-
Click Import. The solution will import in the background.