Security, Privileges, and New Users

Introduction

As a Power Framework Administrator, you will be required to add and remove Power Framework users.  Power Framework exists within a Power Apps environment, so you need to consider access to the environment, as well as the licenses required.

There are 8 main steps for managing user access to the Power Framework App.

1. Assign Licenses to Users

• Power BI Pro
• Project Plan 1 (Minimum requirement if Project for the Web in use)
• Power Apps per-app license is applied to the Power Apps environment (see step 4)

2. Add Users to the M365 Security Group

• All App users should be added to the M365 or AAD Security Group used to secure the Power Apps environment
• This group is also used to share Power BI, SharePoint and PWA access
• Further Groups can be created and used to apply different Security Roles to App users e.g.
  • Power Framework Read-Only Users
  • Power Framework Project Managers
  • Power Framework PMOs
  • Power Framework PMO Admins

3. In the Power Apps Admin Section Apply the Per User App Licenses

• Click Resources > Capacity in LHS menu
• Click Manage Add-ons
• Select Env and Assign App passes

4. Share App

• In the environment mentioned above, select the App (Power Framework), click … and select Share
• First, share the App with all the Security Roles that can be applied to the App
  • Basic User
  • Project Manager
  • PMO
  • PMO Admin
  • Viewer
• Next share the App with the above-mentioned Security Groups, selecting the required security roles, e.g. for Power Framework Project Managers select:
  • Basic User
  • Project Manager

5. Share Power BI App

• In the Power BI Workspace called Power Framework click Update App at the top RHS
• In the permissions tab, under Access add the Security Groups that you want to share the Power BI app with (e.g. the M365 Security Group that is used to secure the environment)
• Also, select Install this app automatically

6. Share PWA Site (If integrating with Project Online)

• The MS Project schedules that are associated with the App are stored in the associated PWA SharePoint site
• This site also needs to be shared with the required Security Group

7. Share SharePoint Team Site

• Documents associated with the Power Framework App are stored in a dedicated SharePoint Team site
• This site also needs to be shared with the required Security Group

8. Assign Users to the Correct Business Unit Within the Power Apps Security Hierarchy

• From within the App Click the cogwheel at the top RHS (Right Hand Side) of the screen and select Advanced Settings
• Navigate to Settings > Security > Users
• Users can be selected and CHANGE BUSINESS UNIT used to move users to the appropriate Business Unit and associated Owner Team (the security hierarchy will be an output from the feature scoping workshops)