With our Business Units created, the next thing we need to do is create Security Roles. Rather that go to the solution view, we will create the roles within the admin portal. Navigate to the same page as before – the environment our Miyagi-Do Dojo Membership solution is in. From there select Security Roles before clicking the + New role button from the top ribbon.

Why are we not adding the roles to the solution? Good question. The reason is that we want to attach roles to Business Units that are children of the default unit for the environment, and such roles cannot be added to a solution. This means that you have to recreate this manually in each environment, which is a bit of a pain indeed!

Role NameBusiness Unit
HQ BaseDefault Business Unit
HQ AdminDefault Business Unit
HQ ReadersDefault Business Unit
California BaseCalifornia
California AdminCalifornia
California ReadersCalifornia
New Jersey BaseNew Jersey
New Jersey AdminNew Jersey
New Jersey ReadersNew Jersey

Click on each Security Role in turn to set the permissions on the Contact table as follows:

RoleCreateReadWriteDeleteAppendAppend toAssign
HQ BaseNoneOrgOrgNoneNoneNoneOrg
HQ AdminOrgOrgOrgNoneOrgOrgOrg
HQ ReadersNoneOrgNoneNoneNoneNoneNone
Calif BaseNoneBusiness UnitOrgNoneNoneNoneOrg
Calif AdminOrgBusiness UnitBusiness UnitNoneBusiness UnitBusiness UnitNone
Calif ReadersNoneBusiness UnitNoneNoneNoneNoneNone
New J BaseNoneBusiness UnitOrgNoneNoneNoneOrg
New J AdminOrgBusiness UnitBusiness UnitNoneBusiness UnitBusiness UnitNone
New J ReadersNoneBusiness UnitNoneNoneNoneNoneNone

Pages: 1 2 3 4

One response to “Managing Data Access with Business Units in Power Platform”

  1. Bulk Importing Data using Dataflows Part 1: Single Table – Power Platform Pete Avatar

    […] that all records have been created under the Headquarters business unit (see our previous post here), and the Owner is your truly! This is because I used my credentials in the earlier step and I am a […]

    Like

Leave a comment