SharePoint Online Permissions & Powerapps

Question

Hi,

I have read some posts on this on my below question, but none cover my proposed solution. My question is does the below work. I am concerned I have overlooked something or the user's can find away around this.

I have built a canvas Powerapp to which user access will be given to approx 10k employees. This app will allow users to create tickets /requests using Gallery and Forms controls linked to a SharePoint list.

Whilst I am aware these user's also need read/edit permissions for the concerned SharePoint list I have been looking for a way to prevent the user accessing the SharePoint, or in particular the lists.

My method, with some basic testing so far, has been to:

1. Modify the Read permissions level to only include site permission 'Open  -  Allows users to open a Web site, list, or folder in order to access items inside that container.'
2. Add these users to the 'Site Visitors' group giving Read permission to the site
3. Stop Inheriting Permissions on the concerned lists
4. Modify the 'Contribute' permissions level to only include: 

Site Permissions - Open  -  Allows users to open a Web site, list, or folder in order to access items inside that container. & View Pages  -  View pages in a Web site.

List Permissions - View Items  -  View items in lists and documents in document libraries. & Edit Items  -  Edit items in lists, edit documents in document libraries, and customize Web Part Pages in document libraries. & Add Items  -  Add items to lists and add documents to document libraries.

5. For the concerned lists give the Visitors user group Contribute access to the the list.

From my testing this allows the user to submit new entries via the PowerApp, but if they try to access the SharePoint Site or List directly (using URL) they get the standard you do not have access page and the option to request access (will disable this part).

Like I mentioned, I am looking for clarity if this is a solution and to ensure I haven't overlooked anything.

Thanks

Answer 1

Thanks Nathan.

Apologies for posting to the wrong forum and thanks for the links, most useful.

Answer 2

Hi Adam,

Please understand that this community focus on questions about SharePoint Online. As your question is related to PowerApps, I'd suggest that you may post your concerns in the PowerApps Community to get dedicated assistance from our PowerApps specialists instead.

I have found the following threads for your reference, please take a look at them and see if they could provide you a clue:

Powerapps and Sharepoint Online Permissions

Understanding Permissions Model - Power Apps with SharePoint

Best Regards,

Nathan