Sharepoint Permission Level for PowerApp with PowerAutomate Flow

%3CLINGO-SUB%20id%3D%22lingo-sub-1487171%22%20slang%3D%22en-US%22%3ESharepoint%20Permission%20Level%20for%20PowerApp%20with%20PowerAutomate%20Flow%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1487171%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20created%20a%20Security%20group%20for%20the%20users%20in%20the%20organization%20who%20mostly%20will%20be%20utilizing%20PowerApps.%3C%2FP%3E%3CP%3EI%20am%20trying%20to%20figure%20out%20what%20a%26nbsp%3B%20minimum%20Sharepoint%20permission%20level%20is%20to%20be%20applied%20to%20document%20libraries%20and%20lists%20in%20Sharepoint.%3C%2FP%3E%3CP%3EPowerApp%20is%20using%20flows%20which%20create%2Fdelete%20files%20and%20folders%20in%20Sharepoint%20libraries%2C%20items%20in%20lists.%20Within%20an%20application%20users%20can%20open%20files%20(link%20to%20the%20file%20is%20provided%20by%20a%20flow).%3C%2FP%3E%3CP%3ECreated%20an%20'Edit_Limited'%20permission%20level.%3C%2FP%3E%3CP%3EWhen%20a%20user%20opens%20Sharepoint%20document%20library%20directly%20(for%20the%20test%20purposes%20only)%2C%20he%20can%20create%2Fopen%2Fdelete%20folders%2Ffiles%20with%20the%20permission%20level%20lower%20than%20it%20is%20necessary%20from%20within%20PowerApp%2FFlow.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhy%20does%20PowerApp%2FFlow%20combination%20require%20rights%20elevation%3F%20It%20requires%20the%20Site%20Permissions%2FManage%20Permissions%20to%20be%20selected%2C%20though%20for%20the%20direct%20access%20(SharePoint)%20it%20is%20not%20necessary.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20is%20a%20permission%20level%20which%20works%20with%20PowerApp%20%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22PowerApp-SP-PermissionLevel-1.jpg%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F200820i93BF357DC338773A%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22PowerApp-SP-PermissionLevel-1.jpg%22%20alt%3D%22PowerApp-SP-PermissionLevel-1.jpg%22%20%2F%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22PowerApp-SP-PermissionLevel-2.jpg%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F200821i8576791B9C92B1F1%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22PowerApp-SP-PermissionLevel-2.jpg%22%20alt%3D%22PowerApp-SP-PermissionLevel-2.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EWith%20'Manage%20Permissions'%20unselected%20it%20works%20for%20the%20direct%20Sharepoint%20access.%3C%2FP%3E%3CP%3EI%20need%20an%20absolute%20minimum%20Sharepoint%20permission%20level%20for%20this%20group%20of%20users.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1487171%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20Flow%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EPowerApps%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Occasional Contributor

I have created a Security group for the users in the organization who mostly will be utilizing PowerApps.

I am trying to figure out what a  minimum Sharepoint permission level is to be applied to document libraries and lists in Sharepoint.

PowerApp is using flows which create/delete files and folders in Sharepoint libraries, items in lists. Within an application users can open files (link to the file is provided by a flow).

Created an 'Edit_Limited' permission level.

When a user opens Sharepoint document library directly (for the test purposes only), he can create/open/delete folders/files with the permission level lower than it is necessary from within PowerApp/Flow.

 

Why does PowerApp/Flow combination require rights elevation? It requires the Site Permissions/Manage Permissions to be selected, though for the direct access (SharePoint) it is not necessary.

 

This is a permission level which works with PowerApp :

PowerApp-SP-PermissionLevel-1.jpgPowerApp-SP-PermissionLevel-2.jpg

With 'Manage Permissions' unselected it works for the direct Sharepoint access.

I need an absolute minimum Sharepoint permission level for this group of users.

0 Replies