Sharing managed powerapp that is deployed using azure pipelines

(4) Share

Report

Posted on by vammers

Hi,

We have managed to deploy canvas apps and flows in a solution to another environment using azure pipelines and power platform build tools. But after deployment, we are not able to share the app with other users even if we are system administrators in the environment. Can some one help me understand why as a system administrator I am unable to share the managed canvas app with other users?

When I use the following command to change the owner of the app, I am able to then Share it with other users. But surely this is not the right way to do this: Set-AdminPowerAppOwner -AppName $app.AppName -EnvironmentName $environmentName -AppOwner $Global:currentSession.userId

Can some one give me guidance on how to deploy a solution as a managed solution to other environments and then share it with other users. What would happen if we share version 1.0.0.1 of the app then re import version 1.0.0.2 - will the permissions stay intact?

Feels like the whole concept of solutions and environments is a half baked and served !

Categories:

Environment

All responses (15)

Answers (0)

ALP2 240 on at

Like (0)

Report

Sharing managed powerapp that is deployed using azure pipelines

Late answer,

It s possible to manage Share With ALM accelerator for PowerPlatform and you also manage share with pipelines premium but i think
this feature is still in preview. Not working well for me
byrnep 218 on at

Like (0)

Report

Re: Sharing managed powerapp that is deployed using azure pipelines

Note also that for Automate Service Principals are now supported. Hopefully this will not prevent sharing as it seems to have in the past.
https://docs.microsoft.com/en-us/power-platform-release-plan/2022wave1/power-automate/ownership-supported-service-principals
byrnep 218 on at

Like (1)

Report

Re: Sharing managed powerapp that is deployed using azure pipelines

You can use an AD 'Service Account' instead that has no MFA and this will be the owner instead of a service principal. It will allow you to log in as that AD account and at least manage the apps/flows sharing.

You can also assign, O365 groups but this is not an option in the Import Task for Power Platform Tools. You'd have to do this manually.

There seems to be a limitation in the browser management that doesn't exist in the CLI. I've run into this before. There's probably different product teams and they are all releasing functionality in different orders.
hjaf 486 on at

Like (0)

Report

Re: Sharing managed powerapp that is deployed using azure pipelines

@vammers

There are some benefits and purpose behind having ALM handle everything in production as @byrnep mentioned, ALM should also handle the sharing. But as ALM may still have some wrinkles to iron out at the early stages, there should perhaps be a documented way to retain ownership in every environment; so that at least the environment system administrator can use the UI to manage solutions in cases of some urgent issue.

I work around this by importing the solution into the environments manually the first time, (as system administrator /customizer), then whenever ALM deploys a new version of the solution the ownership is retained. Perhaps this can be a solution for you as well?
byrnep 218 on at

Like (0)

Report

Re: Sharing managed powerapp that is deployed using azure pipelines

Service principals are currently the only way to connect the pipeline to the environment, and as such will be the owner of the flows/apps.
byrnep 218 on at

Like (0)

Report

Re: Sharing managed powerapp that is deployed using azure pipelines

The problem is the owner is a service principal. You can't log in as a service principal.

Also, pipeline are to remove hands on involvement.
PowerPlatform_V 2 on at

Like (0)

Report

Re: Sharing managed powerapp that is deployed using azure pipelines

I am having same issue as well - using Azure DevOp to migrate my app from Dev to Test environment and cannot share the app. Could you please elaborate on how the limitations have been addressed?
Community Power Pla... on at

Like (0)

Report

Re: Sharing managed powerapp that is deployed using azure pipelines

Hello @DeviKrishna ,

Regarding your second point. In this case, changing the ownership of an app and sharing it with users should be done with a ps script? If using an SPN is a recommended approach.

Thanks,
Anna
Devikumari Krishna 988 Super User 2024 Season 1 on at

Like (0)

Report
Re: Sharing managed powerapp that is deployed using azure pipelines

Hi @vammers ,

Looks like these limitations are addressed now from the time you created this ticket.

Owners of resources can edit flow and PowerApps in managed solution.
If a user has access to the environment but that user is not an owner of resources of a solution, then the user can edit flow, but not PowerApps.
-------------------------------------------------------------------------
If I have answered your question, please mark your post as Solved.
If you like my response, please give it a Thumbs Up.
My Blog: Dynamics 365 Key Topics – https://d365topicsbydk.com/

My YouTube Channel : https://www.youtube.com/channel/UCxSIryP2ah2VpEFr-Z72t1A

Regards
Devi
adedapo 256 on at

Like (0)

Report

Re: Sharing managed powerapp that is deployed using azure pipelines

Hi guys,

I'm facing a similar issue too.
Can the command below be added to the pipeline files for importing?
Set-AdminPowerAppOwner -AppName $app.AppName -EnvironmentName $environmentName -AppOwner $Global:currentSession.userId