Environment security

An environment is a container for your data, apps, and flows; you first learned about environments in Chapter 2, Power Platform.

Each environment is controlled by the security functionalities to restrict who can access the environment. The access to such security functionalities is different depending on whether there is a CDS database in the environment or not.

Environments can be linked to an Azure AD security group. Once linked, only users in that security group will be able to access that environment.

Without a CDS database, access is controlled by users being given either of the following roles on the environment:

• Environment Maker
• Environment Admin 

For more details on security in environments, see https://docs.microsoft.com/power-platform/admin/environments-overview#environment-permissions.

Once a CDS database has been added to an environment, access is controlled by CDS security roles. Users must have a security role to be able to...