|
| 1 | +--- |
| 2 | +title: App access checker for model-driven apps | Microsoft Learn |
| 3 | +description: Describes how to use the app access checker for model-driven apps. |
| 4 | +author: jbujula |
| 5 | +ms.author: jbujula |
| 6 | +ms.reviewer: matp |
| 7 | +ms.service: powerapps |
| 8 | +ms.subservice: mda-maker |
| 9 | +ms.topic: how-to |
| 10 | +ms.date: 06/23/2023 |
| 11 | +ms.custom: template-how-to |
| 12 | +--- |
| 13 | +# App access checker for model-driven apps |
| 14 | + |
| 15 | +Use the app access checker tool to identify common issues found for a specific user that can occur when running a model-driven app. |
| 16 | + |
| 17 | +Issues found by the app access checker include: |
| 18 | + |
| 19 | +- If an app is visible to the user or not. |
| 20 | +- The reason why an app is visible or not visible to the user. |
| 21 | +- If the user has the required license. |
| 22 | + |
| 23 | +## How to use the app access checker |
| 24 | + |
| 25 | +Power Platform admins and makers can use the app access checker to search apps based on user principal name (UPN) or email address. |
| 26 | + |
| 27 | +Open the diagnostics page in your browser by typing https://*environmentURL*/WebResources/msdyn_AppAccessChecker.html, such as *https://contoso.crm.dynamics.com/WebResources/msdyn_AppAccessChecker.html*. Then enter the UPN or email address in the box and then select **Search**. |
| 28 | + |
| 29 | +## How to interpret the results |
| 30 | + |
| 31 | +- **Visible**. |
| 32 | + - If the user doesn't have read privilege on the app module table, none of the apps are visible to the user, and **No** is displayed. |
| 33 | + - If the user has read and/or write privilege on the app module table, then all the apps are visible and **Yes** is displayed. |
| 34 | +- **License**. |
| 35 | + - If the user has appropriate licensing to play the app, **Yes** is displayed. |
| 36 | +- **Security**. |
| 37 | + - If the user has create or write privilege on the app module table, **Yes** is displayed. If the user isn't associated to one or more security roles assigned to the app, check if the user is member of a team and whether the team is associated with that security role. |
| 38 | + |
| 39 | +### Example results |
| 40 | + |
| 41 | +User has access to all visible apps in the environment. |
| 42 | +:::image type="content" source="media/app-access-checker/user-can-view-apps.png" alt-text="User has access to all visible apps in the environment" lightbox="media/app-access-checker/user-can-view-apps.png"::: |
| 43 | + |
| 44 | +User doesn't have visibility or access to any apps in the environment because of missing security role membership associated with each app. |
| 45 | +:::image type="content" source="media/app-access-checker/user-no-access.png" alt-text="Assign security roles to app" lightbox="media/app-access-checker/user-no-access.png"::: |
| 46 | + |
| 47 | +Two examples where the user has visibility to some apps but not others because of missing security role membership associated with the app. |
| 48 | +:::image type="content" source="media/app-access-checker/user-access-role.png" alt-text="User has access to some apps visible but not others" lightbox="media/app-access-checker/user-access-role.png"::: |
| 49 | + |
| 50 | +:::image type="content" source="media/app-access-checker/user-access-role-2.png" alt-text="Assign missing security roles to user" lightbox="media/app-access-checker/user-access-role-2.png"::: |
| 51 | + |
| 52 | +In this example, the user has the required security privilege for the app but doesn't have the required license to access some of the apps. |
| 53 | +:::image type="content" source="media/app-access-checker/user-no-license-access.png" alt-text="User doesn't have required license." lightbox="media/app-access-checker/user-no-license-access.png"::: |
| 54 | + |
| 55 | +In this example, the user doesn't have the required security privilege, so the app access checker isn't able to show licensing details. |
| 56 | +:::image type="content" source="media/app-access-checker/user-no-security-access.png" alt-text="Missing privileges to run the app" lightbox="media/app-access-checker/user-no-security-access.png"::: |
| 57 | + |
| 58 | +If **Security** is **Yes** and **License** is **No** or **Unknown** contact Help + support. More information: [Get Help + support](/power-platform/admin/get-help-support) |
| 59 | +:::image type="content" source="media/app-access-checker/user-yes-security-no-license.png" alt-text="Licensing issue is detected." lightbox="media/app-access-checker/user-yes-security-no-license.png"::: |
| 60 | + |
| 61 | +## Limitation |
| 62 | + |
| 63 | +- App access checker doesn't show details for the Outlook App. This is because that information is only visible to Power Platform administrators. |
0 commit comments