Power Platform Governance and Administration

When using Privileged Identity Management to elevate to Global or Power Platform Admin by default the user is added the System admin security role for all environment, we would like a way to manage this as there are users from other departments that do not administer the Power Platform and they are added as System Admin to the environments. Currently there is no way to see a list of all Systems Admins with direct access to all environments, to view this would require accessing each environment 1 by 1 and removing the access and with multiple environments this can be very time consuming. Then we face the issue happening again when a user PIMs to either Global or Power Platform admin they are added back into the environment as System Admin, ideally we would like users to elevate to these roles to stop being added to the environments.

When multiple solution import/publish all requests are run at the same time an error occurs as per the following.

https://learn.microsoft.com/en-us/troubleshoot/power-platform/power-apps/solutions/cannot-import-solutions-publish-changes#workaround

The page above suggests using Azure pipelines or Github Actions to serialize the deployment actions but it would be beneficial if Dataverse had an internal queing mechanism to avoid this issue.

Allow for management of Power Platform app permissions within SharePoint, for SharePoint integration capability. Goal is to get away from the Sites.FullControl.All API currently used today from the SharePoint integration for Power Pages.

Initial support request details opened for this:

Support request ID

2401240040015793

Issue title

DCR request for SharePoint integration in Power Pages.

Issue description

In order for SharePoint (SP) integration to work, unfettered access to all of SP must be granted to the Power Pages backend Entra App, via the Sites.FullControl.All application type SP API. We have multiple use cases that we as a company are wanting to provide to our customers, in an ISV/SaaS like scenario, driven by Power Pages using it's SP integration feature for document management. We would like to request a DCR be opened for the Power Pages team. Specifically enabling this functionality to work using the Sites.Selected SP API and manage permissions for the Entra App directly in the SP site. This change would be more inline with a zero trust philosophy.

Hi,

It would be great if you can provide support for Quick create form for Virtual Entities in model driven apps. The UI experience will be improved a lot!

Thanks

Michael

We need to clarify the region restriction in Azure policy applied to resource group since we're encountering a discrepancy in the parameters in the Azure policy when creating a Billing policy in Power Platform Admin Center.

The environment we're trying to add is located in [Australia Southeast], and the resource group is under policy which allows creation of resources in [Australia East] and [Australia Southeast]. Technically, this should pass because the location meets the requirements of the policy.

However, the Azure policy return the error missing region [Australia]. And only when user add [Australia] to the policy, it will allow the creation of Biling policy for the environment which is located in [Australia Southeast].

This doesn't make sense this this mean it will allow all region in Australia and is not restricted to Australia East and Southeast. There is no documentation mentioned this part, so this doesn't make sense to the end users.

We will need a documentation or explanation for this type of scenario to avoid confusion in the future.

With the Power Platform and registering webhooks with the plugin registration tool we are given not many options for authentication. We are currently using the Authentication of “Webhook Key” as per the plugin registration tool. It does not satisfy the policy when turn on Authentication on the Function App.

This Function Apps need to compliant with CIS Microsoft Azure Foundations Benchmark 1.4.0. Part of that, for function apps is to satisfy the policy as defined in this link https://learn.microsoft.com/en-us/azure/governance/policy/samples/cis-azure-1-4-0#9-appservice, and this policy https://portal.azure.com/#blade/Microsoft_Azure_Policy/PolicyDetailBlade/definitionId/%2Fproviders%2FMicrosoft.Authorization%2FpolicyDefinitions%2Fc75248c1-ea1d-4a9c-8fc9-29a6aabd5da8

Need to enforce users to use the camera to take images and not to load images from their phone while using model driven power apps on the mobile.

This feature is currently not available. We were successful in hiding the upload button using java scrip when running the app using the browser but not on the mobile.

Right now the date format used in the Power Platform Admin Center is mm/dd/yyyy. You can see this in the overview of Environments (Created on) for example, but also in the Dataverse capacity (Last updated), Analytics, Power Pages sites (Created on), etc.

Most of the world uses a date format which makes more sense like dd-mm-yyyy or yyyy-mm-dd:

https://en.wikipedia.org/wiki/Date_format_by_country.

My request is to add an option in the Power Platform Admin Center to change this date format to one of the above.

Currently, adding IP addresses in IP Restrictions of Power Pages management console is manual. There is no module or cli commands to use to be able to automate adding of IP addresses. It is all manual. It is currently very tedious to add 160+ IP addresses manually just to limit traffic strictly to Azure Front Door, as an example.

Please create a module to allow commands that will add IP addresses via script, or at least improve the UI to allow entry of multiple IP addresses.

In power automate there is a missing feature to add comment under a MS Planner task right after its creation.

Reason: The ID of the communication thread for the asociated Group is not generated with the task, it is generated with first comment under said task.

Solution: Generate the ID of the communication thread with the creation of the Task.