Power Platform Community Forum Thread Details

Power Pages access for university users beyond the 50-user limit

Hello,

I am creating a Microsoft Power Pages site for internal users at my university.

The site is currently set to Private, but I understand that a private Power Pages site can only be shared with up to 50 individual users. Since the site is intended for a larger number of university users, adding each user individually is not a practical option.

However, we do not want to make the site completely public or allow anonymous access. We would like the site to be accessible only to users who sign in with an active university-issued account belonging to our university’s Microsoft Entra ID tenant.

Could you please advise on the correct way to configure this?

Specifically:

Can we change the site from Private to Public while requiring users to sign in before accessing any content?

How can we restrict access so that only users in our university’s Microsoft Entra ID tenant can sign in?

Can external users, guest users, and personal Microsoft accounts be blocked?

Should we use the Authenticated Users web role and page permissions for all pages?

Does this configuration require assistance from our university’s Power Platform or Microsoft Entra administrator?

Are there any licensing or capacity requirements when more than 50 university users access the site?

Our goal is not to create a publicly accessible website. We want an internal website that is available to all authorized university account holders without having to add each user individually.

Thank you.

Categories:

Security

Power Apps portals

Private mode is essentially intended for you to hide the site whilst in development, it was not intended for live sites. Your Table Permissions / Web Roles is what gives users access to content.

You can restrict your site to your Microsoft Entra. In the power pages settings you configure Entra as the only identity provider. You can also take this further and in Azure set conditional access on the Application that is your Site (each site you create gets an Application automatically created for it in Azure) e.g. limit it to only a specific Office 365 Security Group. Adding conditional access would require someone with appropriate Office 365 privileges (e.g. Global Admin).

By default the Authenticated Users web role is inherited by anyone that signs in, the Anonymous Users web role is inherited by anyone that is not signed in. If you want to restrict access to dataverse data to only those that are signed in then the Table Permissions for that data should only be in the Authenticated web role (or a different custom web role that is manually assigned). If you want to restrict access to specific Web Pages then add Page Permissions. (usually you will have a combination of both)

You will need to have appropriate licences for anonymous and authenticated users (this also applies if you keep it in Private mode), there are separate licence packs for both.

Quick Links

Subscribe to this forum!