[CoE Starter Kit - model-driven apps are not visible

[MantasSal]

What is your question?

Hello,

when looking Apps section and selecting particular environment I can see 3 Apps:

When looking at Power Platform admin center I can see more apps:

So model-driven apps are not visible in apps section. Why?

Thanks

What solution are you experiencing the issue with?

Core

What solution version are you using?

No response

What app or flow are you having the issue with?

No response

[manuelap-msft]

Hello,

1. Can you check if the Admin | Sync Template v3 (Model Driven Apps) is running without failures and has been running continuously since you've set up the CoE kit?
2. Have you recently refreshed the dashboard?

[MantasSal]

Hello,

Yes, Sync Template v3 model driven apps is not running successfully.

@.***

It stops here:

@.***

@.***

From: Manuela Pichler @.> Sent: Thursday, November 24, 2022 2:41 PM To: microsoft/coe-starter-kit @.> Cc: Mantas Salickas @.>; Author @.> Subject: Re: [microsoft/coe-starter-kit] [CoE Starter Kit - model-driven apps are not visible (Issue #4266)

Attention: This e-mail was sent from someone outside of BDO Global Office. Always use caution when opening attachments or clicking links from unknown senders or when receiving unexpected e-mails.

Hello,

1. Can you check if the Admin | Sync Template v3 (Model Driven Apps) is running without failures and has been running continuously since you've set up the CoE kit?
2. Have you recently refreshed the dashboard?

- Reply to this email directly, view it on GitHubhttps://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fmicrosoft%2Fcoe-starter-kit%2Fissues%2F4266%23issuecomment-1326398146&data=05%7C01%7C%7Cac664b4d73cc418e80ef08dace192a93%7Ce6504ea0d81945c0b8c664690f272b63%7C0%7C0%7C638048904738821482%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=dJQFWMmlMJw8%2BMg0kyeu0L6KA0jF2bnN9tBQdsu00u0%3D&reserved=0, or unsubscribehttps://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FA3GILOZBBYN2KDW7U76NFSTWJ5O6NANCNFSM6AAAAAASJ62GIM&data=05%7C01%7C%7Cac664b4d73cc418e80ef08dace192a93%7Ce6504ea0d81945c0b8c664690f272b63%7C0%7C0%7C638048904738821482%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=lSTjODlLAJxTyBFt%2BT6Vi%2FLb%2FKlB1PoWXWYKFDn4Uoc%3D&reserved=0. You are receiving this because you authored the thread.Message ID: @.**@.>>

Global IT & Services B.V. ("Global IT") is a limited liability company registered in the Netherlands with KVK number 17239055 and VAT number NL8203.71.476.B01. It is a subsidiary of the Belgian company Brussels Worldwide Services BV ('BWS'), that coordinates service provision within the international BDO network of independent member firms ('the BDO network'). Global IT provides services to BWS and the BDO network. Global IT, BWS and the BDO Member Firms are separate legal entities and have no liability for each other's acts or omissions. Nothing in the arrangements or rules of the BDO network shall constitute or imply an agency relationship between Global IT and the member firms of the BDO network. BDO is the brand name for the BDO network and for each of the BDO member firms.

[Jenefer-Monroe]

You will need to open the Model Driven App flow and find its failure to see why its not working. You can return here when you find that source, note that you need to log in to GitHub to share screenshots, responding in email will not share those images

[MantasSal]

Sorry, I will post image here. I tried looking in AAD for user and group according ID provided in error, but could not find anything.

[Jenefer-Monroe]

Apologies for the delay in responding. If you go into the trigger statement you will see the environment instance url. Can you browse to that?

Here are some common things we have seen that cause this:

1. The identity running the flow does not have the Power Platform Admin Role permanently assigned. Note that the required roles and licenses must be available to this user continuously; if admin access is granted only temporarily via Privileged Identity Management (PIM), this won't be sufficient to run the CoE Starter Kit. For more information please see What identity should I install the CoE Starter Kit with?

2. The target environment for the call here was renamed but the old name is cached. In this case turning Admin | Sync Template v3 (Model Driven Apps) off and back on will clear that cache.

[MantasSal]

UPDATE: restarted Admin | Sync Template, but it still fails with same error. Sometimes it runs successfully. Could you advice, maybe we should ignore this error?

Hello,

I tried browsing that url, but got permission error. It means I have to add permission for CoE account? If yes, how should I do it?

Admin access is granted permanently, PIM is not used. I will try stopping it and run it again.

[Jenefer-Monroe]

Hello did you do the restart of the flow to fix?

[MantasSal]

Hello, yes, I stopped Admin | Sync Template (Model Driven Apps) flow and started it again. It fails every third or fourth time it runs.

[Jenefer-Monroe]

With this one and https://github.com/microsoft/coe-starter-kit/issues/4423, it appears that your user does not have PP Admin role or your license permanently assigned, or there is some other issue with your user.

Can you please go to Azure Portal, look up the user running these flows, and let me know when you see for this role?

[MantasSal]

[Jenefer-Monroe]

Each one of these rows is a sep envt

You can see that by adding a column to the table. Go to http://flow.microsoft.com/ > Find your CoE Envt > Core Components > Cloud Flows > Admin | Sync Template v3 (Model Driven Apps) From here you will see an Edit columns option and you can add the environmentname (its GUID type name)

[Jenefer-Monroe]

Can you confirm that its the same environments failing over and over? Or it is always changing? If you click All runs there you can filter by failures after you add this environment name

[MantasSal]

Hello, Different environments are failing over and over again.

[Jenefer-Monroe]

Lets see if we can repro in a reduced situation:

1. Create a new instant cloud flow with a manual trigger

2. Add the Get Environment as Admin action of the Power Platform for Admins connector, and chose to enter a custom value, enter one of the envt GUIDS taht is failing (ex fb49...)

3. Add the List rows (legacy) action of the Microsoft Dataverse (legacy) connector

4. Again for Environment chose Enter custom value, chose Linked Metadata Instance URL

5. For Table Name chose Enter custom value and input appmodules

6. Save and test the flow and let me know your results.

[Jenefer-Monroe]

closing out as no further action for starter kit team

[MantasSal]

Hello, can we reopen this case, please? I got this error:

Outputs: Boder: { "status": 403, "message": "SecLib::CheckPrivilege failed. User: 07161f6f-e548-ed11-bba1-000d3aaaeebf, PrivilegeName: prvReadEntity, PrivilegeId: a3311f47-2134-44ee-a258-6774018d4bc3, Required Depth: Basic, BusinessUnitId: 9460d98f-da44-ed11-bba3-000d3aad7e62, MetadataCache Privileges Count: 3646, User Privileges Count: 194", "error": { "message": "SecLib::CheckPrivilege failed. User: 07161f6f-e548-ed11-bba1-000d3aaaeebf, PrivilegeName: prvReadEntity, PrivilegeId: a3311f47-2134-44ee-a258-6774018d4bc3, Required Depth: Basic, BusinessUnitId: 9460d98f-da44-ed11-bba3-000d3aad7e62, MetadataCache Privileges Count: 3646, User Privileges Count: 194" }, "source": "pan-development.crm4.dynamics.com", "errors": [], "debugInfo": "clientRequestId: ac41799a-1243-402f-805f-9b5bfc94c324" }

Headers: { "Pragma": "no-cache", "Cache-Control": "no-store, no-cache", "Set-Cookie": "ARRAffinity=31d7e112df4ed9785378ef6db30d2113b50c989793293d38ed0e4472abdd114a;Path=/;HttpOnly;Secure;Domain=commondataservice-ne.azconn-ne-003.p.azurewebsites.net,ARRAffinitySameSite=31d7e112df4ed9785378ef6db30d2113b50c989793293d38ed0e4472abdd114a;Path=/;HttpOnly;SameSite=None;Secure;Domain=commondataservice-ne.azconn-ne-003.p.azurewebsites.net", "x-ms-request-id": "ac41799a-1243-402f-805f-9b5bfc94c324", "Strict-Transport-Security": "max-age=31536000; includeSubDomains", "X-Content-Type-Options": "nosniff", "X-Frame-Options": "DENY", "Timing-Allow-Origin": "*", "x-ms-apihub-cached-response": "false", "x-ms-apihub-obo": "false", "Date": "Thu, 19 Jan 2023 09:20:37 GMT", "Content-Length": "812", "Content-Type": "application/json", "Expires": "-1" }

[Jenefer-Monroe]

Hello, your issue is not related to the kit then, there is something wrong with your user identity as it is not able to access the environment. If you have the correct license and PPAdmin role permanently assigned (as stated above) then there is aproduct issue in place. You will need to take this new reduced issue here to the product support.

[MantasSal]

Hello,

Sorry, could you be more specific? I need to bring this issue to what product support? Microsoft Power platform?

---

Iš: Jenefer Monroe @.> Išsiųsta: 2023 m. sausio 19 d., ketvirtadienis 15:18 Kam: microsoft/coe-starter-kit @.> Kopija: Mantas Salickas @.>; Author @.> Tema: Re: [microsoft/coe-starter-kit] [CoE Starter Kit - model-driven apps are not visible (Issue #4266)

Attention: This e-mail was sent from someone outside of BDO Global Office. Always use caution when opening attachments or clicking links from unknown senders or when receiving unexpected e-mails.

Hello, your issue is not related to the kit then, there is something wrong with your user identity as it is not able to access the environment. If you have the correct license and PPAdmin role permanently assigned (as stated above) then there is aproduct issue in place. You will need to take this new reduced issue here to the product support. [image]https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fuser-images.githubusercontent.com%2F89584709%2F213452702-294a9f57-1286-4389-83f6-a2255eb5c100.png&data=05%7C01%7C%7Cc946ebd0275c4fc542e408dafa1fa969%7Ce6504ea0d81945c0b8c664690f272b63%7C0%7C0%7C638097311141079646%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=rkZYH5tu8cXMrEH4QZ%2B63rjDozvmh81X3kSpwWlMu18%3D&reserved=0

— Reply to this email directly, view it on GitHubhttps://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fmicrosoft%2Fcoe-starter-kit%2Fissues%2F4266%23issuecomment-1396964805&data=05%7C01%7C%7Cc946ebd0275c4fc542e408dafa1fa969%7Ce6504ea0d81945c0b8c664690f272b63%7C0%7C0%7C638097311141079646%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=0H0uSnFxft2PgIDpjMc6FmikBjc4kb1j4IrZrmdca8w%3D&reserved=0, or unsubscribehttps://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FA3GILO3ZJS75T4N7J3RSKB3WTE5KPANCNFSM6AAAAAASJ62GIM&data=05%7C01%7C%7Cc946ebd0275c4fc542e408dafa1fa969%7Ce6504ea0d81945c0b8c664690f272b63%7C0%7C0%7C638097311141079646%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=JLytJXA%2Fz6LABLRycCdBWKP395HknEI8%2F4wh0m%2FmQhs%3D&reserved=0. You are receiving this because you authored the thread.Message ID: @.***>

Global IT & Services B.V. (“Global IT”) is a limited liability company registered in the Netherlands with KVK number 17239055 and VAT number NL8203.71.476.B01. It is a subsidiary of the Belgian company Brussels Worldwide Services BV (‘BWS’), that coordinates service provision within the international BDO network of independent member firms ('the BDO network'). Global IT provides services to BWS and the BDO network. Global IT, BWS and the BDO Member Firms are separate legal entities and have no liability for each other's acts or omissions. Nothing in the arrangements or rules of the BDO network shall constitute or imply an agency relationship between Global IT and the member firms of the BDO network. BDO is the brand name for the BDO network and for each of the BDO member firms.

[Jenefer-Monroe]

Correct, per above, you are unable to connect to that environment with your identity, regardless of using flows from the kit or not. You will need to contact Power Platform's product support. Please see https://learn.microsoft.com/power-platform/admin/get-help-support

[MantasSal]

Could you, please, clarify what CoE dashboard data will be missing if I do not solve this issue and leave it as it is?

---

From: Jenefer Monroe @.> Sent: Thursday, January 19, 2023 4:38:20 PM To: microsoft/coe-starter-kit @.> Cc: Mantas Salickas @.>; Author @.> Subject: Re: [microsoft/coe-starter-kit] [CoE Starter Kit - model-driven apps are not visible (Issue #4266)

Attention: This e-mail was sent from someone outside of BDO Global Office. Always use caution when opening attachments or clicking links from unknown senders or when receiving unexpected e-mails.

Correct, per above, you are unable to connect to that environment with your identity, regardless of using flows from the kit or not. You will need to contact Power Platform's product support. Please see https://learn.microsoft.com/power-platform/admin/get-help-supporthttps://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Flearn.microsoft.com%2Fpower-platform%2Fadmin%2Fget-help-support&data=05%7C01%7C%7Cf430d2fa114a47e5d90e08dafa2acfd8%7Ce6504ea0d81945c0b8c664690f272b63%7C0%7C0%7C638097359031936760%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=mOxwQyuNzGCbRRflYHVY26oTQrEGMLxPMspwKbz9MbQ%3D&reserved=0

— Reply to this email directly, view it on GitHubhttps://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fmicrosoft%2Fcoe-starter-kit%2Fissues%2F4266%23issuecomment-1397078120&data=05%7C01%7C%7Cf430d2fa114a47e5d90e08dafa2acfd8%7Ce6504ea0d81945c0b8c664690f272b63%7C0%7C0%7C638097359031936760%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=8ilz4dTkm5fQq0DAhSiE7buskOmKgURQwUabfBWhB1k%3D&reserved=0, or unsubscribehttps://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FA3GILOZFXHROOQ4BXCWOSGLWTFGVZANCNFSM6AAAAAASJ62GIM&data=05%7C01%7C%7Cf430d2fa114a47e5d90e08dafa2acfd8%7Ce6504ea0d81945c0b8c664690f272b63%7C0%7C0%7C638097359031936760%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=0p11ToKOvyUJX%2FdB7zrHTCbiQ8QW%2Bedf5oMtajbggqk%3D&reserved=0. You are receiving this because you authored the thread.Message ID: @.***>

Global IT & Services B.V. (“Global IT”) is a limited liability company registered in the Netherlands with KVK number 17239055 and VAT number NL8203.71.476.B01. It is a subsidiary of the Belgian company Brussels Worldwide Services BV (‘BWS’), that coordinates service provision within the international BDO network of independent member firms ('the BDO network'). Global IT provides services to BWS and the BDO network. Global IT, BWS and the BDO Member Firms are separate legal entities and have no liability for each other's acts or omissions. Nothing in the arrangements or rules of the BDO network shall constitute or imply an agency relationship between Global IT and the member firms of the BDO network. BDO is the brand name for the BDO network and for each of the BDO member firms.

[Jenefer-Monroe]

You will not be able to gather information from those environments. I suggest, if you want to have a CoE that you solve this. Otherwise you will not have predictale results in the kit generally speaking.

[MantasSal]

Hello, I have asked Microsoft support about this permissions issue. The answer was that the flow is using legacy connector. It is the reason why it fails. Can you explain, please, or can we change connector?

[manuelap-msft]

• This flows retrieves model driven app inventory from all environments in your tenant
• Model Driven Apps are stored in the appmodule Dataverse table of the environment they're created in
• This flow loops through all environments in your tenant to query this appmodule table to retrieve model driven app inventory
• The Dataverse (current) connector can only connect to the current environment and not other environments in the tenant. Only the legacy connector has the capability to connect to other environments.
• Because of this, we can't replace the legacy connector with the current one.
• We also have many other customers who are using this flow successfully with the legacy connector, so I don't think that's the reason for the failure.

Learn more about the legacy Dataverse connector: https://learn.microsoft.com/en-us/power-platform/important-changes-coming#microsoft-dataverse-legacy-connector-cds-20-connector-for-power-automate-flows-will-be-deprecated-and-replaced-with-another-connector