microsoft / coe-starter-kit

Other
739 stars 218 forks source link

[CoE Starter Kit - BUG] Inventory show to respective BU admin only #6864

Closed sunilmhatugade closed 11 months ago

sunilmhatugade commented 11 months ago

Does this bug already exist in our backlog?

Describe the issue

Hi Team

We implemented the CoE Kit in our tenant and completed inventory of all Env. Now all details showing in Power platform Admin View apps and Power BI report also . But in our organization's Multiple Business units available. And each Business unit has one Power platform Admin. After sharing the Power platform admin View app and power BI report with these admin they can see all information related to other BU also. We have to restrict this data. Each BU admin can see data related to his BU only...

how we can do this.

Expected Behavior

No response

What solution are you experiencing the issue with?

Core

What solution version are you using?

4.16

What app or flow are you having the issue with?

Power Platform Admin View

What method are you using to get inventory and telemetry?

None

Steps To Reproduce

No response

Anything else?

No response

AB#217

Jenefer-Monroe commented 11 months ago

Hello. I'm afraid we don't have a write up for this nor have we tested it ourselves. But in theory you could add BUs to the envt and have the different records (envts, apps, etc) owned by these Business Units. You would still need a system admin persona to hand out (in a separate flow or by hand) new environments to these BUs.

Here is a starter link to get you going. https://learn.microsoft.com/power-platform/admin/wp-security-cds#matrix-data-access-structure-modernized-business-units

To our knowledge we havent made any architectural decisions which would block people from doing this and we've heard a few orgs pull this off but if you find places we have blocked you please do let us know.

Jenefer-Monroe commented 11 months ago

closing out as no further action for starter kit team