
Hello everyone,
I need some help with a requirement in my model-driven app.
I have 3 tables: Risk, Plan, and KRI.
Relationships:
Risk (1-n) Plan
Risk (1-n) KRI
Scenario:
When an Admin creates a Risk record, the BU Head receives an email and can see the Risk record.
The BU Head can then assign that Risk to a BU User in the same Business Unit.
The BU Head can also create a Plan for that Risk and assign a Plan Owner (who may belong to another BU).
Both the BU User and the Plan Owner should be able to edit the Risk or Plan assigned to them.
My question is: how do I assign a specific user to a specific record?
I heard that we can use the Grant Access action in Power Automate, but I don’t know the exact flow.
Also, what permissions does the BU Head role need (CRUD, share, etc.)?
And what permissions does a BU User need so they can only see and edit the Risk records that are assigned to them?
I am also confused about the Business Unit structure.
In my app, I have:
All BU Heads and BU Users belong to the level-3 BUs.
But when I edit the BU Head role in the Admin Center, it is shown under the level-1 BU (Org…), and I set Read permission as “Business Unit” scope.
My question:
Will the BU Head only see Risk records in their own BU (level 3)?
Or will they see all records in the entire Org and I have to filter them in the Canvas App manually?
For example, I assigned a user as BU Head of the “Brand” BU — what exactly will they be able to see?