Understanding authorization

After an interactive user or a service account has been successfully authenticated, they need to obtain certain privileges within the respective service. The Power Platform solution components provide certain individual authorization frameworks. In this section, you will learn about the authorization concepts for Dataverse, Power Apps, Power Automate, Power BI, and Power Pages.

Authorization in Power Platform

Authorization within a Power Platform environment except Power BI is managed using environment security roles. For the purpose of understanding security roles, it is necessary to distinguish between three basic types of environments, as illustrated in the following diagram:

Figure 7.7: Authorization – relevant environment types

As we can see, there can be a Power Platform environment without a Dataverse database, with a Dataverse database but without any Dynamics 365 app, and an environment with some Dynamics 365 apps installed...