Just Genius!! How come, every time i am stuck in powerapps, it is your videos that solves the problem. I am disappointed that youtube allows us to like a video only once.
LoL This video literally kept my at the edge of my seat... I had used the list approach, and even a flow to check via sharepoint API if an user/email is part of a sharepoint group. This trick is just fast and honestly, plain brilliant. I hope the bug in the Datasource info function gets fixed... One of these days...
Simple and sweet all we need to know is how to play with existing old school stuff, but I can clearly see your extensive experience and exposure to come up with this solution. Great video Reza... !!
I have an access control list for the limited number of technicians we have and it works like a charm. On the list I have a column for the app name, if the user is active or not, their role, and the app mode. Works brilliantly. And I have four apps accessing this access control list. Each have their own specific roles.
I can't say how much I am thankful for this video, I have learned a lot from the video, simple and easy to understand, I am a new beginner, it is helping me day by day
I had a customer ask for this last week. I didn't have time to research but after I saw another of your videos, I subscribed. Then I saw you have done this and I knew i subscribed to the right channel! Thank you for all your hard work!!!
Reza Sir ..This is super simple approach..thanks for sharing .We implemented same using list & flow you explained earlier which was somewhat complicated.Thanks again.
@@RezaDorrani I have AD Connect running with all the department groups already set up for our Intranet SharePoint Site. I Didn't think of that...will definitely check that out, it would save so much time. I've implemented your security trick this morning and it works great. Also for filtering a drop down menu. To get rid of the delegation warning I collected the Security list and work from there. Thanks again!!
This is genius, I have implemented it and it works great. Do you expand on this video to show how to filter if you put list items in for multiple departments in the same list?
Thanks! I am not aware of any options to do that. I would recommend checking or posting your query on forums in case someone has done something similar powerusers.microsoft.com
Thanks Reza, i was wondering why i am only getting solutions to check for O365 groups and not Sharepoint groups.My site is not connected to O365 so i was wondering what i am missing till you said it that there is indeed no direct way to access SP groups from canvas apps.
@@RezaDorrani yes indeed, thanks alot. Chcking O365 group linked to my team site does not help because still we cannot distinguish between Owners, members, visitors part of o365 group. So your solution is perfect for me.
Thanks a lot for this great tip. In my case I have a sharepoint list of system owners and Through my app, I am performing CRUD on that list to add or remove owners however for the new owners to use the app, they must added to a sharepoint group. I would like to achieve this via power app when adding the owner maybe add checkbox to add him/her to the sharepoint group at the same time. Is that possible?? or any work around to achive this securely. Thanks!
I do not have a video reference on this scenario and would have to try it out to know its possibility. I recommend checking on the forums at powerusers.microsoft.com/ in case someone has done something similar.
Great Video! I saw a few other videos which were in the direction of using Power Automate to check if user is present in a SharePoint group, but i think your approach saves us a call and is a better. Quick question: Would this have any performance related problem if we have a lot if people within the SharePoint group that i am checking ?
Performance wise it would be the same with respect to breaking list item permissions in a SP list. The more users you have, the more checks it would need to make. I recommend creating an AD group, adding all users to that group and then add the AD group to the SP group. That ways it would require less manitenance on the SP side.
This one really got me thinking. Getting members of a SharePoint group (specifically one that is not tied to an Office 365 group) is really interesting. I do have a solution and I think I will blog about it :) Stay tuned!
Awesome Explanation!! Need one help. In my case, i have used one SP list called “Owner”, in which 2 email id is present under “Title” who can access particular field in form but for other user fields display mode should be disabled. What code i should write
I would have to try your scenario out to give u the code. I would recommend you post your query with screenshots on the forums at powerusers.microsoft.com
Love the solution! I have an issue that a site owner not included in the SharePoint group can see the item in the list even though I have removed site owners from 'Manage access' list.. Perhaps someone could advice if Owner access is hidden somewhere else?
Which site template are you using for SharePoint site - Communication or Team site? In a team site, the owners group are also site collection admins and hence they will have complete access on all artifacts.
This scenario purely deals with SP groups which is handles the core security logic for Comm sites. For Team sites the security is managed via O365 groups. There is an O365Groups connector available where you can check if user is member of that group.
Thank you Raza for a great workaround. It worked fine for me but I get an error message for non-admin users when lunching the app, even though the app works fine for them. The error message " Error when trying to retrieve data from the network: Access denied" and they only see their items as they suppose to. Any idea why this was happening?
I have not come across this issue and hence not sure what is the cause for your issue. I recommend posting your issue/query with screenshots on the forums at powerusers.microsoft.com
Great Work. Do you know how to retrieve the group members from a particular list items. For example, Employee list can access by person A and person B. Inside the Employee list has 2 items the first item can only access by person A. How can I get the members who can access the first item ?
Hello Reza, Nice and simple video, I have little complex scenario, where there are 8 tabs for 8 different Groups in Org (i.e groups HR, Legal, etc..), need to implement the security using this approach, how to check this on App start?
@@RezaDorrani Hi, I have done that. In powerapps how do I diferentiate that name as in a list it contains multiple items Eg: abc is a item and abc permission is given Xyz is another item and xyz permission is given Now on the app start how to add both Can you given an example of it If you have a video of it will be grateful to go through.
@@leenashreeindrani532 Give a unqiue name to each item in the list. Then in Power App, use Filter(listname, Title ='item unique name') and then check its count.
Hi Reza, As suggested I have written as below Set(isAdmin,If(CountRows(Filter(Security,Title='Owner Group'))>0,true,false)); Though I am part of SharePoint groups it returns false. Can I get your number to contact on this please...
Hi Reza. Just wondering, if the bug with DataSourceInfo function and Sharepoint as data source fixed as of now? Is it now possible to use? Thanks in advance. More powers!
Hi Reza, I followed all your videos, can you please refresh if you have this kind of functionality, I have the following field and use case besides 1. people group field - contain multiple user accounts(display as name) 2. Textfield - logged user field(display as name) 3. Textfield1 - display the name here in this field if the logged user is present in the people group field Thanks and take care
I would have to try out your scenario to provide any guidance. I would recommend you post your issue/query with screenshots on the forums at powerusers.microsoft.com
@RezaDorrani if in this example there is isAdmin and isValidator, and both those groups have been given access to their corresponding group name items, can you share how I write each in onstart. Do I filter by the group name (used as the item name) in the access list?
Many thanks! What if one is required to email the list of people in one of these groups? I usually create a list of security groups, including members, and in flow, get the name of the users this way. How can one grab the users from the security group in flow?
Hello Reza, I have a question regarding item level permission and already existing groups in SharePoint. The situation is like described below. I have 4 users ex. Tom, Marry, John, Jack. Earlier I created two groups A(Tom, Merry) and B(John, Jack), those 2 groups uses 1 list, and I what I want is to allow Merry to have permission to Items created by Tom, but she couldn’t see items created by group B (John, Jack). Is it possible to achieve this? My frontend is a PowerApp.
Hi Reza. At 9:16 you can see that this user cannot see the list item you created, but can CREATE a new item . This would break the CountRows validation in the app wouldn't it? If the non-admin user knows the list URL and can create a new item, he would automatically have access to an item, and thus get a CountRows of at least 1. Would you break permission inheritance on the "Help Center Admins" list or is there another way?
Each list item is unique. You could use the ID column in SharePoint to only check for that specific list item. Even if user creates one, it would not be queried in the Power App. The video also shows a query being performed for a specific list item.
Not sure about that since I have not tried it. I will recommend checking on the forums at powerusers.microsoft.com/ in case someone has done something similar.
Hello sir, howyour logic will work if you are deciding only on count, and it will not work if you have more than 1 group.e.g: if you show some resources to one group, you add that group in LIST, but if you need to show some other resources to other group, you will have to add that group in LIST but you have to hide the first resources from groupB. than how could you handle it? it will also throw the count>0 for first resources
Permissions are being assigned at an item level in the list. You can also use the Title column of the list to define the group. Item 1 - Title = Group A, item permissions only to Group A Item 2 - Title = Group B, item permissions only to Group B In Power App check for combination of Title and row count for each group.
I need to set a group of people with certain permission level to add items only without add/ create new view can you please advice ? thank you ,,, I already set a public default view with filtration of created by [Me] so every one with the link can only see his own items ... the thing is when I grant them the access on the level of permission I need they will not be able to open the list and they got request access page ! ... this is so wired please help! & when I give them directly a contribute permission they are able to create a view I need your advise please
Cant I just check if the person is in the group or not, Why should I need to create a list and then create a restricted access item for this to achieve. There should be a way to directly access the group from powerapps.
Hello Reza..I have one requirement where I have to check user from 1st Approver Collection ....if user is from that collection then move to second approval code in powerapps.If user is from 2nd Approver Collection then no need to go for any approval code.
I do not have a video reference on this and will need to try it out to provide guidance. I will recommend checking on the forums at powerusers.microsoft.com/ in case someone has done something similar.
@@RezaDorrani thank you for reply. I raised this question in PowerApps community also but didn't get any response from there.I figured out that I need to check user().email on Submit button of form to check whether the logged in user is from Approver collection or not but stuck at implementation because for other users with read permission powerapps code is working correctly but I need to alter for approvers(contribute permission).
@@hemlataharwani9404 Forums is a free platform. You may or may not get a response. You will need to wait patiently for a response. It could take days or weeks. If it’s urgent, then you may need to look at getting consulting help.
@@RezaDorrani yes I am waiting for the reply and researching as well actually I am beginner in powerapps and doing this for learning purpose...thank you for all the videos..they are great help.
You need to set the permissions for each item (item level permissions). Give each list item a unique Title. Query for the title in Power Apps to check if user is part of group.
To get group members, you would have to call a flow from Power Apps, use the http API to get group members and return that info back to Power Apps. The technique showcased in the video does not require flow.
This solution worked, sort of, but I have a problem. For a user that is not in the group that can't see the Security List it gives and error when I run the PowerApp every time. It gives the error when it tries to populate the IsAdmin variable. It does work if after you close the error message, but obviously I don't want every non-admin to see an error message everytime they run the application. Thanks for your help!
There should be no problem. Everyone should have read access to the security list. Key is to set item level permission on the list item. So when we check to see the item count within the list - it would return as 0 for users who dont have access to the list item.
@@RezaDorrani Thanks for the really quick response. I'll re-watch the video and attempt get this set up correctly. As a side question, do you know if there is a way to check to see if a user has certain access to a SharePoint List? I saw another video suggesting to use the DataSource, but I believe you said this was worthless when SharePoint holds your data. Correct? Thanks again for the help and posting the video.
Subs Guts The DataSource object does not work for SharePoint. For checking a users access to a list you would have to do a little bit of error handling in case the user has no access.
While users (who was not admin and cannot access Security MS List file ) open the App on mobile phone , they will see warning massage pop on top screen like "something wrong with access/connection with the Security (ms)list file". Could we do to ignore or prevent the warning massage as mentioned ? Thank you.
Wow! I guess I am the only one this doesn't work for. I followed this to the letter. I created a new list and added the name of the User Group in the title. I then added only those individuals, including myself, to the user group. I then created unique permissions on the list and remove all the other user access groups (unfortunately this is a sub site and so the Site admins also have access and I cannot test this because I am a Site Collection Admin) . The Long and short of this is... When I go my SharePoint Power Apps form (custom form for SharePoint List) and add the date source, and put the function in the SharePointIntegration start, I get 'false' for isAdmin. I have refreshed the data, and rerun the start, still false for me. I am in this group, I can see the item in the table, it should be true.
I am having a similar issue. I stead of showing the button for an Admin, I am hiding an Edit button to Visitors. I switched the true and false, but the Visitor is still seeing the button.
Tested this on a subsite and it works fine. Followed the steps in the video and got it to work. Make sure the list item you create in the list has permissions broken and security setup correctly.
Tested this on a subsite and it works fine. Followed the steps in the video and got it to work. Make sure the list item you create in the list has permissions broken and security setup correctly.
Should check the user belongs to which group in a particular site and if I want to give access then add that user into particular SharePoint group, If I want to revoke that user then I should remove in that particular group
@@palikaanusha3043 I do not have a video reference on this scenario. You would probably need to use flows to do all this. I would recommend checking on forums in case someone has done something similar powerusers.microsoft.com
I know this video is old, but you should avoid teaching "If( someCondition, true, false)". Instead, you should just have this: Set(isAdmin, CountRows(Security) > 0). This is cleaner and teaches people to better understand booleans.
I knew I've subscribed to the right guy for Power Platform solutions. You're the man 👍🙂
Welcome aboard!
You surely have :) Thank you for subscribing and I hope to keep providing valuable content.
This is absolutely genius. I know this is old content but this is an amazing work around.
Thank You so much!
Just Genius!! How come, every time i am stuck in powerapps, it is your videos that solves the problem. I am disappointed that youtube allows us to like a video only once.
🤩 Thank you for the compliments
LoL This video literally kept my at the edge of my seat... I had used the list approach, and even a flow to check via sharepoint API if an user/email is part of a sharepoint group. This trick is just fast and honestly, plain brilliant. I hope the bug in the Datasource info function gets fixed... One of these days...
Thank you
Simple and sweet all we need to know is how to play with existing old school stuff, but I can clearly see your extensive experience and exposure to come up with this solution. Great video Reza... !!
Thank you
This is still relevant and was very helpful. Thanks Reza!
Glad to hear it!
This is exactly what I was looking for and only have to maintain the SharePoint Group. Thank you!
Most welcome
I have an access control list for the limited number of technicians we have and it works like a charm. On the list I have a column for the app name, if the user is active or not, their role, and the app mode. Works brilliantly.
And I have four apps accessing this access control list. Each have their own specific roles.
Ok
Awesome trick. This situation has been a nightmare for many
Agreed. This is a must use when working with SharePoint Groups for security purposes.
I can't say how much I am thankful for this video, I have learned a lot from the video, simple and easy to understand, I am a new beginner, it is helping me day by day
Great to hear!
I had a customer ask for this last week. I didn't have time to research but after I saw another of your videos, I subscribed. Then I saw you have done this and I knew i subscribed to the right channel! Thank you for all your hard work!!!
Thanks for the sub!
I am so glad I found this!! it is so much easier than doing the Power Automate check user group option and it works consistently! Thank you!
Glad it helped and thank you for watching
Something so easy i have been searching for, and there it works without any flaws.. thanks for making it so easy to learn and setup.
You are most welcome!
Reza , You are Outstanding MVP ...I am Following you Quite Sometime . Your Examples are Summing up for all the Seamless Automation !
Thank You for your kind words
Reza Sir ..This is super simple approach..thanks for sharing .We implemented same using list & flow you explained earlier which was somewhat complicated.Thanks again.
You are most welcome
Brilliant! Works like a charm on the first try. Thank you so much!
Most welcome
Thank you for making this video. You really are gifted and brilliant PowerApps Guru!
Thank you for your kind words.
Great Video Reza -Ji!
Thanks
What a clever solution! You are so creative man, it's awesome. Thanks!
Thank You! Simple trick but highly effective.
Brilliant and Intelligent approach. Worked like a charm
Thank you George
Great, thanks for the explanation!
Welcome
Superb and nicely explained
Thanks
That's a very tidy solution to this - thanks for sharing
Thanks Graeme
Very helpful video, thanks. Up untill now I was always adding a new screen for security and had a bunch of text fields for front/back admins, etc.
This is a super useful hack.
You can also add AD groups to a SharePoint group and use the same hack to see if user is part of the AD group.
@@RezaDorrani I have AD Connect running with all the department groups already set up for our Intranet SharePoint Site. I Didn't think of that...will definitely check that out, it would save so much time.
I've implemented your security trick this morning and it works great. Also for filtering a drop down menu. To get rid of the delegation warning I collected the Security list and work from there.
Thanks again!!
Great video Reza! Thanks for sharing your knowledge with us. Please keep the videos coming. They are super useful!
Thank you Teresa
Simple and smart
Thank you
Glad to hear that. Thanks for watching.
This is my answer that i am looing for, Thank you
Glad to hear that.
Thanks, Reza! You`re the best
👍
@@RezaDorrani I wish there was a way to give admins access to add and remove members ( to the SharePoint group) from the app)
@@aysanhaghani5271 Only option would be via flow or custom connector.
This is genius, I have implemented it and it works great. Do you expand on this video to show how to filter if you put list items in for multiple departments in the same list?
Check ruclips.net/video/J-hMMXrKMVE/видео.html
Nice workaround. Shout-out for you!!!
Thank you
Heyyy Reza, you are genius! Great idea, will be so much useful. Keep them coming please. Thanks.
Thank you! Will do!
Thank you Asif. Trying my best :)
very clean trick!!
👍
I had to subscribe just based on how great this video was! WOW!
Thanks for the sub. Hope to provide many more valuable videos.
Great video, Reza! Thanks a lot for sharing, God bless you.
Thank you Eduardo
Great Video.
Thanks!
Wow. This is a great solution. Thanks for sharing this.
Thanks for watching. Have more coming in future.
Pure genious!
👍
Great video
Thanks!
Thank you so much!! This was very helpful and easy to understand and follow :)
Glad it was helpful!
So useful!
Nice to hear
Just awesome, thanks you sir! keep up the good work.
Thank You
Like this, very helpful! A good pattern! Thank you for sharing!!!
Thank you for watching Tomislav
Best videos and great content. Your doing a great job. Subscribed 😇
Thanks and welcome to the channel.
Wow! this is clever. Thank you so much for sharing.
Thank you! Cheers!
great videos and content brother..... Keep up the good work.
Appreciate it!
Very nicely explained
Thank you
Thks Reza 🙋♂️❤👏👏👏
You are most welcome
Brilliant!
Looking for a workaround in pasting screenshots in rich text editor control.
Thanks!
I am not aware of any options to do that. I would recommend checking or posting your query on forums in case someone has done something similar
powerusers.microsoft.com
This is great, thank you Reza! How would you do this for the user that is not currently logged in. (ie. is user X part of an Admin group?)
ruclips.net/video/J-hMMXrKMVE/видео.html
Brilliant!
Thanks
Great solution option! Will this also work for members of MS365 groups given access to the list item?
Yes, SP groups can contain security groups.
Super cool trick, thanks a million. 👍
Glad you liked it!
This is genius! Thank you!
You are so welcome!
Glad you liked it.
Thank you soooo much Reza! You are a brilliant MVP. Can you please guide me if instead of count we can check the title of the group?
Yes, you can check for title
Nice approach!
Glad it was helpful!
Thank you
Thanks Reza, i was wondering why i am only getting solutions to check for O365 groups and not Sharepoint groups.My site is not connected to O365 so i was wondering what i am missing till you said it that there is indeed no direct way to access SP groups from canvas apps.
SP Groups is not understood by Apps
@@RezaDorrani yes indeed, thanks alot. Chcking O365 group linked to my team site does not help because still we cannot distinguish between Owners, members, visitors part of o365 group. So your solution is perfect for me.
Beautiful. Thank you
Thank you Shannon
I am huge fun of you Reza.
Thanks.
Thanks a lot for this great tip. In my case I have a sharepoint list of system owners and Through my app, I am performing CRUD on that list to add or remove owners however for the new owners to use the app, they must added to a sharepoint group. I would like to achieve this via power app when adding the owner maybe add checkbox to add him/her to the sharepoint group at the same time. Is that possible?? or any work around to achive this securely. Thanks!
I do not have a video reference on this scenario and would have to try it out to know its possibility. I recommend checking on the forums at powerusers.microsoft.com/ in case someone has done something similar.
@@RezaDorrani thanks
Great Video! I saw a few other videos which were in the direction of using Power Automate to check if user is present in a SharePoint group, but i think your approach saves us a call and is a better. Quick question: Would this have any performance related problem if we have a lot if people within the SharePoint group that i am checking ?
Performance wise it would be the same with respect to breaking list item permissions in a SP list.
The more users you have, the more checks it would need to make.
I recommend creating an AD group, adding all users to that group and then add the AD group to the SP group. That ways it would require less manitenance on the SP side.
Thank you for yor video! Can you advice, how to get members of SharePoint group in Power Apps?
This one really got me thinking. Getting members of a SharePoint group (specifically one that is not tied to an Office 365 group) is really interesting.
I do have a solution and I think I will blog about it :) Stay tuned!
Thanks for this. I can do everything except removing owners from a list item access. It still keeps showing owners in the Manage Access option.
I believe the Owners permissions is a default behavior in SharePoint.
Awesome Explanation!! Need one help. In my case, i have used one SP list called “Owner”, in which 2 email id is present under “Title” who can access particular field in form but for other user fields display mode should be disabled. What code i should write
I would have to try your scenario out to give u the code. I would recommend you post your query with screenshots on the forums at powerusers.microsoft.com
Nice trick
Thank you
Love the solution! I have an issue that a site owner not included in the SharePoint group can see the item in the list even though I have removed site owners from 'Manage access' list.. Perhaps someone could advice if Owner access is hidden somewhere else?
Which site template are you using for SharePoint site - Communication or Team site?
In a team site, the owners group are also site collection admins and hence they will have complete access on all artifacts.
This scenario purely deals with SP groups which is handles the core security logic for Comm sites. For Team sites the security is managed via O365 groups. There is an O365Groups connector available where you can check if user is member of that group.
Thank you Raza for a great workaround. It worked fine for me but I get an error message for non-admin users when lunching the app, even though the app works fine for them. The error message " Error when trying to retrieve data from the network: Access denied" and they only see their items as they suppose to. Any idea why this was happening?
I have not come across this issue and hence not sure what is the cause for your issue. I recommend posting your issue/query with screenshots on the forums at powerusers.microsoft.com
@@RezaDorrani Thank you, I was able to solve it, it was because of the permission to the list.
Great Work.
Do you know how to retrieve the group members from a particular list items. For example, Employee list can access by person A and person B. Inside the Employee list has 2 items the first item can only access by person A. How can I get the members who can access the first item ?
Thanks.
You would need to call flow to query (using REST API) the users from the SharePoint group to get the members.
Hello Reza,
Nice and simple video,
I have little complex scenario, where there are 8 tabs for 8 different Groups in Org (i.e groups HR, Legal, etc..), need to implement the security using this approach, how to check this on App start?
You would have to repeat the logic 8 times on App start for each group
You would need to create 8 line items in the SP list and apply row level security. Then check each item on App start.
@@RezaDorrani Thank you!!
yes, I achieved this with row level security :)
Hi Reza,
This video helps a lot to find a way
I would like to know how to define if I have multiple SharePoint groups
Can you please share that.
Add multiple items in that hidden list. Trick is to add item level security to the list item.
@@RezaDorrani Hi, I have done that.
In powerapps how do I diferentiate that name as in a list it contains multiple items
Eg: abc is a item and abc permission is given
Xyz is another item and xyz permission is given
Now on the app start how to add both
Can you given an example of it
If you have a video of it will be grateful to go through.
@@leenashreeindrani532 Give a unqiue name to each item in the list. Then in Power App, use Filter(listname, Title ='item unique name') and then check its count.
@@RezaDorrani Hi Reza, Thanks will check and let you know.
Hi Reza,
As suggested I have written as below
Set(isAdmin,If(CountRows(Filter(Security,Title='Owner Group'))>0,true,false));
Though I am part of SharePoint groups it returns false.
Can I get your number to contact on this please...
Genius
Thanks 😊
Hi Reza. Just wondering, if the bug with DataSourceInfo function and Sharepoint as data source fixed as of now? Is it now possible to use? Thanks in advance. More powers!
DataSourceInfo is still a known issue with SharePoint as of today.
Great explanation! How can we remove all users from sharepoint group?
You can manually do that from SharePoint group.
Hi Reza, I followed all your videos, can you please refresh if you have this kind of functionality,
I have the following field and use case besides
1. people group field - contain multiple user accounts(display as name)
2. Textfield - logged user field(display as name)
3. Textfield1 - display the name here in this field if the logged user is present in the people group field
Thanks and take care
I would have to try out your scenario to provide any guidance. I would recommend you post your issue/query with screenshots on the forums at powerusers.microsoft.com
I would love to see a more complex version where we have different groups and levels of access. I.e. admin, approver, reviewer etc.
I have no plans as of now but something that is in my backlog
@@RezaDorrani any suggestions on how to filter the count rows if I want to establish this?
@@chrisleisure4918 I would have to try it out to know the options
@RezaDorrani if in this example there is isAdmin and isValidator, and both those groups have been given access to their corresponding group name items, can you share how I write each in onstart. Do I filter by the group name (used as the item name) in the access list?
Chris, I would have to try that out to know the steps. Its been years since I did this video.
Many thanks! What if one is required to email the list of people in one of these groups? I usually create a list of security groups, including members, and in flow, get the name of the users this way. How can one grab the users from the security group in flow?
There is an Azure AD connector in flow that lists out group members.
Great hack! Thaaaanks
Thank you
Most welcome
Hi, do I need to grant people access for the whole site in order to give them an access to a specific list ?
You could grant access to a specific list.
Hello Reza,
I have a question regarding item level permission and already existing groups in SharePoint. The situation is like described below. I have 4 users ex. Tom, Marry, John, Jack. Earlier I created two groups A(Tom, Merry) and B(John, Jack), those 2 groups uses 1 list, and I what I want is to allow Merry to have permission to Items created by Tom, but she couldn’t see items created by group B (John, Jack). Is it possible to achieve this? My frontend is a PowerApp.
Check ruclips.net/video/EJyZfYMi4n0/видео.htmlsi=3O6e5PntEgcCTWCL
Hi Reza. At 9:16 you can see that this user cannot see the list item you created, but can CREATE a new item . This would break the CountRows validation in the app wouldn't it? If the non-admin user knows the list URL and can create a new item, he would automatically have access to an item, and thus get a CountRows of at least 1.
Would you break permission inheritance on the "Help Center Admins" list or is there another way?
Each list item is unique. You could use the ID column in SharePoint to only check for that specific list item. Even if user creates one, it would not be queried in the Power App.
The video also shows a query being performed for a specific list item.
Hello reza, is there a way to check if a current logged in user is a member of a SharedMailbox?
Not sure about that since I have not tried it. I will recommend checking on the forums at powerusers.microsoft.com/ in case someone has done something similar.
is there a way to use the sharepoint group as the items of a combo box or a drop down box?
My guess is Yes by using flow to query SharePoint api and sending response back to power apps.
@@RezaDorrani thanks for the tip, but I decided to go with collection in app as it's a rather small group of people, still good to know. thanks a lot~
Sir Can we filter sharepoint choice field option according to the sharepoint group user in power apps? if possible please guide me
Not sure. I have not come across this scenario. I will recommend checking on the forums at powerusers.microsoft.com
Hi Sir Reza, Can we check users belong to a particular SharePoint group via power apps directly ,without using power automate flows
Does this video use power automate flow?
@@RezaDorrani no sir, but i need in the scenario where the user is shared with app not with the site
@@sandeepkumar-rq2mk You have to share the site or list with user in order for them to work with SharePoint data in power apps.
Hello sir,
howyour logic will work if you are deciding only on count, and it will not work if you have more than 1 group.e.g: if you show some resources to one group, you add that group in LIST, but if you need to show some other resources to other group, you will have to add that group in LIST but you have to hide the first resources from groupB. than how could you handle it? it will also throw the count>0 for first resources
Permissions are being assigned at an item level in the list.
You can also use the Title column of the list to define the group.
Item 1 - Title = Group A, item permissions only to Group A
Item 2 - Title = Group B, item permissions only to Group B
In Power App check for combination of Title and row count for each group.
I need to set a group of people with certain permission level to add items only without add/ create new view can you please advice ? thank you ,,, I already set a public default view with filtration of created by [Me] so every one with the link can only see his own items ... the thing is when I grant them the access on the level of permission I need they will not be able to open the list and they got request access page ! ... this is so wired please help! & when I give them directly a contribute permission they are able to create a view I need your advise please
I will recommend posting your scenario on forums at powerusers.microsoft.com
Cant I just check if the person is in the group or not, Why should I need to create a list and then create a restricted access item for this to achieve. There should be a way to directly access the group from powerapps.
Because there is no direct action to check if user is in SharePoint group within power apps.
Hello Reza..I have one requirement where I have to check user from 1st Approver Collection ....if user is from that collection then move to second approval code in powerapps.If user is from 2nd Approver Collection then no need to go for any approval code.
I do not have a video reference on this and will need to try it out to provide guidance. I will recommend checking on the forums at powerusers.microsoft.com/ in case someone has done something similar.
@@RezaDorrani thank you for reply. I raised this question in PowerApps community also but didn't get any response from there.I figured out that I need to check user().email on Submit button of form to check whether the logged in user is from Approver collection or not but stuck at implementation because for other users with read permission powerapps code is working correctly but I need to alter for approvers(contribute permission).
@@hemlataharwani9404 Forums is a free platform. You may or may not get a response. You will need to wait patiently for a response. It could take days or weeks. If it’s urgent, then you may need to look at getting consulting help.
@@RezaDorrani yes I am waiting for the reply and researching as well actually I am beginner in powerapps and doing this for learning purpose...thank you for all the videos..they are great help.
Hi Reza, Could you please tell me what to do if there are multiple items in security list?
You need to set the permissions for each item (item level permissions). Give each list item a unique Title. Query for the title in Power Apps to check if user is part of group.
@@RezaDorrani thanks.. such a great video
@@sonalshinde5248 I would recommend you check this one also ruclips.net/video/J-hMMXrKMVE/видео.html
Can't we do this by getting group members instead of using another list. I mean is there any reason why it won't work directly
To get group members, you would have to call a flow from Power Apps, use the http API to get group members and return that info back to Power Apps.
The technique showcased in the video does not require flow.
This solution worked, sort of, but I have a problem. For a user that is not in the group that can't see the Security List it gives and error when I run the PowerApp every time. It gives the error when it tries to populate the IsAdmin variable. It does work if after you close the error message, but obviously I don't want every non-admin to see an error message everytime they run the application. Thanks for your help!
There should be no problem.
Everyone should have read access to the security list.
Key is to set item level permission on the list item. So when we check to see the item count within the list - it would return as 0 for users who dont have access to the list item.
@@RezaDorrani Thanks for the really quick response. I'll re-watch the video and attempt get this set up correctly. As a side question, do you know if there is a way to check to see if a user has certain access to a SharePoint List? I saw another video suggesting to use the DataSource, but I believe you said this was worthless when SharePoint holds your data. Correct? Thanks again for the help and posting the video.
Subs Guts The DataSource object does not work for SharePoint. For checking a users access to a list you would have to do a little bit of error handling in case the user has no access.
How to update a list when a user is added to a SharePoint group (by checking if the user exists or not) using Power Automate flow?
You would need a trigger for user being added to a list. It would have to be via flow or some event trigger.
@@RezaDorrani Thanks a lot Reza!
While users (who was not admin and cannot access Security MS List file ) open the App on mobile phone , they will see warning massage pop on top screen like "something wrong with access/connection with the Security (ms)list file". Could we do to ignore or prevent the warning massage as mentioned ? Thank you.
Not sure if I understood your question.
Key is to give users read access to the list and break permissions at the list item level.
@@RezaDorrani Yes , App is work properly but only Users always see warning massage popup once open the App. May I capture and send pic to you ?
@@akkaradechsrithongchai7766 I world recommend to post the issue with screenshots on the forums at powerusers.microsoft.com
Hey is it possible sending an email from power apps to sharepoint group members
You would need to call flow to get group members
Wow! I guess I am the only one this doesn't work for. I followed this to the letter. I created a new list and added the name of the User Group in the title. I then added only those individuals, including myself, to the user group. I then created unique permissions on the list and remove all the other user access groups (unfortunately this is a sub site and so the Site admins also have access and I cannot test this because I am a Site Collection Admin) . The Long and short of this is... When I go my SharePoint Power Apps form (custom form for SharePoint List) and add the date source, and put the function in the SharePointIntegration start, I get 'false' for isAdmin. I have refreshed the data, and rerun the start, still false for me. I am in this group, I can see the item in the table, it should be true.
I am having a similar issue. I stead of showing the button for an Admin, I am hiding an Edit button to Visitors. I switched the true and false, but the Visitor is still seeing the button.
Tested this on a subsite and it works fine.
Followed the steps in the video and got it to work.
Make sure the list item you create in the list has permissions broken and security setup correctly.
Tested this on a subsite and it works fine.
Followed the steps in the video and got it to work.
Make sure the list item you create in the list has permissions broken and security setup correctly.
Hi, How to handle this for more than one group?
Each group would be a new item in the SharePoint List.
Hi Reza, does this still work to date??
Yes it does
I need sharepoint current site grops, not users
Videos shows how to check if user is part of a sharepoint group. What is your scenario?
Should check the user belongs to which group in a particular site and if I want to give access then add that user into particular SharePoint group, If I want to revoke that user then I should remove in that particular group
@@palikaanusha3043 I do not have a video reference on this scenario. You would probably need to use flows to do all this. I would recommend checking on forums in case someone has done something similar
powerusers.microsoft.com
@@RezaDorrani Thank you Reza, You are such a very kind & responsible person.
Very complicated for me.
Apologies. Check on forums in case someone has a simpler workaround
powerusers.microsoft.com
Hello everyone
Thats my opening line 😁
I know this video is old, but you should avoid teaching "If( someCondition, true, false)". Instead, you should just have this: Set(isAdmin, CountRows(Security) > 0). This is cleaner and teaches people to better understand booleans.
This was done years ago. Check patterns in my newer videos.