Skip to main content
Community site session details

Community site session details

Session Id :
Power Pages - Security
Suggested answer

Custom Roles produce no results.

(1) ShareShare
ReportReport
Posted on by 6
I have been trying to create a custom role in my application and nothing I have attempted has worked. All I want is a basic user role that can run the app and all it's connections without them having access to the designer/solution. When I create a custom basic user they are allowed to open the app but not see any of the data, then when I give access to the tables in use, it removes access from opening the application. I've tried making copies of default roles with more access and removing things from it. I have tried starting from scratch and adding permissions. I have checked the test users diagnostics in the admin center and they have access to the business unit. There is no documentation of what the tables in security role creation are referring to. The preset roles for the environment are essentially useless and not all users should have to be a system admin in order to use an application. If any one has any answers or guidance I would appreciate it. I will not be contacting support so please don't recommend that since they have not been helpful in prior experiences.
 
Below is the error that I receive on the other account with the attached custom role as well as the diagnostic result of the account. I'm not sure what the issue is.
Categories:
  • Suggested answer
    oliver.rodrigues Profile Picture
    9,342 Most Valuable Professional on at
    Custom Roles produce no results.
    so just to clarify, this is Dataverse/environment roles and not Portal Roles - this thread may have been posted in the wrong forum but that's fine
     
    one thing to know is that Security Roles are always cumulative, so you can assign multiple roles to the same user and this will basically layer up giving them the highest privilege according to all security roles
     
    so you can assign the Basic Role + specific table roles
    did you also give access to the app (model-driven / canvas app) to that user? 
     
    @Jon Unzueta I am sure you have a lot of your own knowledge an experience to contribute, perhaps take additional time in future to actually help users instead of copying and pasting AI results
  • Suggested answer
    Jon Unzueta Profile Picture
    830 Super User 2025 Season 2 on at
    Custom Roles produce no results.
     

    It sounds like you're dealing with a frustrating permissions issue in a Power Platform or Dynamics 365 environment. Based on what you've described, here’s a breakdown of what might be going wrong and how we can troubleshoot it:


    🔍 Understanding the Problem

    You want to:

    • Create a custom security role that allows users to run the app and access data.
    • Prevent users from accessing the maker/designer experience.
    • Avoid giving System Administrator privileges.

    But:

    • When you grant access to the app, users can’t see data.
    • When you grant access to the data (tables), users can’t open the app.
    • The default roles are either too permissive or too restrictive.
    • Diagnostics show access to the business unit, but the app still fails.

     Checklist for a Working Custom Role

    Here’s a step-by-step checklist to help you build a working role:

    1. App Access

    Ensure the role has:

    • Read access to the Model-driven App table (or Canvas App if applicable).
    • Read access to the App entity in the environment.
    • Read access to Customizations and Solution tables is NOT required for runtime users.

    2. Table Permissions

    For each table used in the app:

    • Grant at least Read (and optionally Create, Write, Append, Append To) access.
    • Scope should be Business Unit or Organization depending on your data model.

    3. Environment Access

    Make sure the user:

    • Is assigned to the correct environment.
    • Has access to the Dataverse environment (not just the app).

    4. App Sharing

    • The app must be shared with the user or a security group they belong to.
    • The tables must also be shared or accessible via the role.

    5. Avoiding Maker Access

    • Do not assign roles like Environment Maker or System Customizer.
    • Avoid giving access to Solution, Customization, or Process tables unless needed.

    🛠️ Troubleshooting Tips

    • Use the “Check Access” tool in the Power Platform Admin Center to simulate access.
    • Use Monitor in Power Apps to trace what’s failing when the user opens the app.
    • If the app is model-driven, ensure the site map doesn’t reference tables the user can’t access.

    📄 Documentation & Guidance

    Since you mentioned the lack of documentation, I’ll search for the most up-to-date Microsoft guidance on:

    • Custom security roles for app users
    • Table permissions best practices
    • Common pitfalls in Power Platform role configuration

      🏷️ Tag me if you have any further questions or if the issue persists. ✅ Click "Accept as Solution" if my post helped resolve your issue—it helps others facing similar problems. ❤️ Give it a Like if you found the approach useful in any way.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Announcing our 2025 Season 2 Super Users!

A new season of Super Users has arrived, and we are so grateful for…

Paul Stork – Community Spotlight

We are honored to recognize Paul Stork as our July 2025 Community…

Congratulations to the June Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > Power Pages

#1
Lucas001 Profile Picture

Lucas001 60 Super User 2025 Season 2

#2
Fubar Profile Picture

Fubar 55 Super User 2025 Season 2

#3
surya narayanan Profile Picture

surya narayanan 35

Featured topics