Question
A user needs to create a Power Apps portal app.
The user is getting a permission denied error when creating the portal app.
You need to configure permissions to create the portal app.
Which three permissions should you configure? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. In the Power Platform admin center, ensure that the user account has read-write access. Correct
- B. In Azure Active Directory, assign the Contributor role to the application at the subscription scope.
- C. In Azure Active Directory, ensure that the user has permission to register an app. Correct
- D. In the Power Platform admin center, change the portal app owner to the user.
- E. In the Power Platform admin center, ensure that the user has the System administrator security role. Correct
Explanation
To create a Power Apps portal, the user account needs read-write access mode in the Power Platform admin center (A) and the System Administrator security role in the environment (E). Portal provisioning also registered an application in Azure Active Directory for the portal, so the user also needed permission to register applications in Azure AD (C). Without it, creation failed with a permission error. Assigning the Contributor role to an application at subscription scope is not part of portal provisioning. Changing the owner of an existing portal does not let a user create a new one. Note: in today's Power Pages, a platform-managed identity is used, so the app-registration permission is no longer required for new environments.
