Enable Managed Environments

Admins can enable, disable, and edit Managed Environments in the Power Platform admin center. Admins can also use PowerShell to disable Managed Environments.

Permissions

• You must be an admin to enable or edit Managed Environments. That is, you must have the role of global admin, Power Platform service admin, or Dynamics 365 admin Azure Active Directory.
• Any user with permission to see environment details can view the Managed Environments property for an environment.
• Users with the Delegated Admin role or the Environment Admin security role aren't allowed to change the Managed Environments property in an environment.

Important

Copy and restore environment lifecycle operations require the Managed Environments property to be the same in the source and destination before the operation can start.

Enable or edit Managed Environments in the admin center

1. In the Power Platform admin center, in the left panel, select Environments.

2. Select the check mark to the left of an environment.

3. On the command bar, select Enable Managed Environments. If the environment is already managed, select Edit Managed Environments.

4. Configure the settings, and then select Enable or Save.

Use the following settings to increase visibility and control for the selected environment.

Setting	Description
Limit sharing	Help reduce risk by limiting how widely canvas apps can be shared.
Don't set limits	Select to not limit sharing of canvas apps.
Exclude sharing with security groups	Select if makers aren't allowed to share canvas apps with any security groups. Admins may share with a limit on who an app can be shared with.
Limit total individuals who can be shared to	If Exclude sharing with security groups is selected, select to limit the number of people that makers can share canvas apps with.
Usage insights	Select to include insights for this environment in the weekly email digest.
Data policies	Help safeguard your organizational data by limiting the connectors available.
See active data policies for this environment	View the policies that define the consumer connectors that specific data can be shared with.

Disable Managed Environments using PowerShell

Admins can use PowerShell to remove the Managed Environments property on an environment. The environment must not be using any Managed Environments capabilities.

Here's an example PowerShell script that calls the API to set the Managed Environments property:

$UpdatedGovernanceConfiguration = [pscustomobject]@{
    protectionLevel = "Basic"
 }
Set-AdminPowerAppEnvironmentGovernanceConfiguration -EnvironmentName <EnvironmentID> -UpdatedGovernanceConfiguration $UpdatedGovernanceConfiguration

Known limitations

The Managed Environments state cannot be activated on developer environments.

See also

Managed Environments overview
Usage insights
Limit sharing
Data policies
Licensing
View license consumption (preview)
Tenant settings