microsoft / coe-starter-kit

Other
739 stars 216 forks source link

[CoE Starter Kit - Issue] : Restrict makers from creating apps unless approved #8858

Open nitikeni80 opened 3 weeks ago

nitikeni80 commented 3 weeks ago

Does this bug already exist in our backlog?

Describe the issue

Client granted access to Power Apps to citizen developers, they started building apps for production use and the count is getting higher and out of control, they want to limit access to makers by not allowing them to publish the app for use unless approved by few people (admins/managers). This will restrict users from creating apps they wish for production use. At the same time, they do not want to block access to the makers completely.

Expected Behavior

clients wants to provide access to makers to create applications but they do not want them published for end users to use without an approval process.

What solution are you experiencing the issue with?

Governance

What solution version are you using?

4.31

What app or flow are you having the issue with?

Power Apps Approval BPF

What method are you using to get inventory and telemetry?

None

Steps To Reproduce

No response

Anything else?

none

Jenefer-Monroe commented 2 weeks ago

We do not have any proactive governance in the kit. We do have the compliance processes which look for apps that are heavily used or shared, which we use to approximate a "production app". Once detected you can then approve or reject them. You can also manually flag the apps for approval even if they don't hit the thresholds.

Set up Developer Compliance components Whats in the compliance process Example compliance flow

nitikeni80 commented 2 weeks ago

thanks for reaching out... however this MS blog (https://learn.microsoft.com/en-us/power-platform/guidance/coe/governance-components) says the other way around ... it says we can control the publishing apps unless it approves ... isn't that correct or am i missing something

could you pls provide insight ..

Or it;s fair to assume that CoE kit has NO ability to "restrict App maker publishing app unless approved by admin" ?

Jenefer-Monroe commented 2 weeks ago

Sorry can you please point to the specific text you mean?

We do not have the ability to prevent people form publishing, no.

nitikeni80 commented 2 weeks ago

if you could pls look at "Power Apps App Approval BPF" under "Business process flows (BPFs)" section ..

Jenefer-Monroe commented 2 weeks ago

sorry im not seeing anything that says we can prevent publish.

nitikeni80 commented 2 weeks ago

my apologies, it start with this statements "This process helps the admin audit the app approval process" and i interpreted that any app publishing goes through the approval process and Admin has to approve/reject or ask for more information...

have i interpreted incorrectly ?

Jenefer-Monroe commented 2 weeks ago

ok I see. No your interpretation is incorrect.

"This process helps the admin audit the app approval process"

This means that any app that is detected as heavily used needs to have details filled about it by the maker so that admins can assess if its healthy / ready for broad usage. But that is not pro-active, its once the app is already out there and shared.

nitikeni80 commented 2 weeks ago

thanks, @Jenefer-Monroe !!

much appreciated ... I think we CoE should have the feature in future as few of my clients is asking this kind of control.

Jenefer-Monroe commented 2 weeks ago

Thanks for the suggestion. Happy to put it on the backlog. Will mark as a feature and allow PM to rank. Thanks!