Canvas 应用程序 - Dataverse - 用户无法创建新记录
我们的用户无法使用 Canvas 应用程序向自定义 Dataverse 表添加新记录。
编辑现有记录有效 - 记录随 Dataverse 中的更改一起保存。
他们具有以下安全角色：
- 基本用户
- 和自定义角色，该角色在组织级别授予自定义实体的创建、读取、写入、追加和追加权限。
继承设置为直接用户和团队。
我们还导入了 Microsoft 提供的 min priv 应用程序使用角色，但除了一项权限外，它也拥有基本用户所做的一切。
有人遇到过这个问题并且知道还需要什么许可吗？
我们还尝试在“自定义”选项卡下授予以下权限：
Canvas App、 选项集， 实体密钥， 定制， 解决方案， 发布定制
当授予“系统定制员”角色时，它可以工作。显然，我们不能启用此角色，但这些设置中的某些内容似乎使其起作用。
任何帮助表示赞赏！
非常感谢， 珍妮
Our users are unable to add a new record to a custom Dataverse table using a Canvas App.
Editing an existing record works - the record is saved with the changes in Dataverse.
They have the following security roles:
- Basic User
- and a custom role that grants create, read, write, append and append to permissions for the custom entities on an organizational level.
The inheritance is set to Direct User and Team.
We have also imported the min priv apps use role provided by Microsoft but - with the exception of one permission - it has everything that the Basic User does too.
Has anyone had this issue and know what permission is needed additionally?
We have also tried granting permissions for the following privileges under the "Customization" tab:
Canvas App,
Option Set,
Entity Key,
Customizations,
Solution,
Publish Customizations
When granting the "system customizer" role, it works. Obviously, we can't leave this role enabled but it seems something in those settings makes it work.
Any help is appreciated!
Many thanks,
Jenny
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
所以我找到了解决方案。不太清楚为什么会这样，但它确实起到了作用。
我从这里导入了“最小权限安全角色”： https://learn.microsoft.com/en-us/power-platform/admin/database-security#minimum-privileges-to-run-an-app
我已保存它作为一个新角色，并为我们的自定义实体添加了所需的（组织级别）权限。现在我们的用户可以创建记录了！
我（还）不确定他们现在拥有哪些以前缺少的权限，因为我将最小权限秒角色的设置与基本用户进行了比较，只发现了一些差异，即基本用户不包括的权限。但是，向我昨天创建的自定义角色授予这些权限并没有帮助。
如果有人知道这种方法有何不同，请随时分享！
谢谢！
So I've found a solution. Not quite sure why this works but it did the trick.
I imported the "min privilege Sec Role" from here: https://learn.microsoft.com/en-us/power-platform/admin/database-security#minimum-privileges-to-run-an-app
I saved it as a new role and added the required (organizational level) privileges for our custom entities. And now our users can create records!
I am not (yet) certain which privilege they have now that was missing before because I compared the settings of the min privilege Sec Role to the Basic User and only found a couple of differences, i.e. privileges that the Basic User didn't include. However, granting those privileges to the custom role I created yesterday didn't help.
If anyone has an idea as to what difference this approach makes, feel free to share!
Thanks!