Understanding authorization

After an interactive user or a service account has been successfully authenticated, it is necessary to have the capability to manage the privileges within the respective service. The Power Platform solution components provide certain authorization frameworks. In this section, you will learn about the authorization concepts for CDS, Power Apps, Power Automate, Power BI, and Power Apps portals.

Authorization in Power Platform

Authorization within a Power Platform environment except Power BI is managed using environment security roles. For the purpose of understanding security roles, it is necessary to distinguish between three basic types of environments, as illustrated in the following diagram:

Figure 7.7 - Authorization – relevant environment types

As we can see, there can be a Power Platform environment without a CDS database, with a CDS database but without any Dynamics 365 app, and an environment with some Dynamics...