Merge pull request #3744 from MicrosoftDocs/mints_access_checker

preview content for access checker

Author: mduelae

powerapps-docs/maker/TOC.yml

@@ -71,6 +71,8 @@
         href: ../user/assign-or-share-records.md
       - name: Share records using Access Team
         href: ../user/Access-team.md
+      - name: Check your user access to a record
+        href: ../user/access-checker.md
       - name: Add a connection role
         href: ../user/add-connection-role.md
       - name: Deactivate accounts or contacts

powerapps-docs/user/access-checker.md

@@ -0,0 +1,72 @@
+---
+title: "Check your user access and permissions| MicrosoftDocs"
+description: How to check user access and security role.
+author: mduelae
+manager: kvivek
+ms.service: powerapps
+ms.component: pa-user
+ms.topic: conceptual
+ms.date: 11/06/2020
+ms.author: mkaur
+ms.custom: ""
+ms.reviewer: ""
+ms.assetid: 
+search.audienceType: 
+  - enduser
+search.app: 
+  - PowerApps
+  - D365CE
+---
+
+# Check your user access to a record
+
+[!INCLUDE [cc-beta-prerelease-disclaimer](../includes/cc-beta-prerelease-disclaimer.md)]
+
+To perform an action on a record, a user needs to have the required privilege assigned through a security role or the user must be a member of a team that has a security role with assigned privileges.
+
+To perform actions on a record, the system checks your privileges and if the privilege check passes, then the system performs an access check. The access check verifies that you have the required rights to perform actions on a record such as read, write, create, delete, append, append to, share, and assign.
+
+You can have access rights to a perform an action on a record through ownership, role access, shared access, or hierarchy access.
+
+|Access type|Description|  
+|---------------|-----------------|  
+|**Ownership**| User owns the record or belongs to a team that owns the record.|  
+|[**Role access**](https://docs.microsoft.com/power-platform/admin/how-record-access-determined#role-access)|User has access to perform an action on a record because of their security role.|  
+|[**Shared access**](https://docs.microsoft.com/power-platform/admin/how-record-access-determined#shared-access)| The record is shared with a user, team, or organization by a user that has appropriate share rights.|  
+|[**Hierarchy access**](https://docs.microsoft.com/power-platform/admin/how-record-access-determined#hierarchy-access)|Hierarchy access only takes place if hierarchy security management is turned on for the organization and the entity. The user also needs to be a manager.
+
+For more information on how privileges and access checks work, go to [How access to a record is determined](https://docs.microsoft.com/power-platform/admin/how-record-access-determined).
+
+## Early access feature
+
+Your administrator has to opt in to early access updates for your environment and then install the updates to get this feature. More information: [Opt in to early access updates](https://docs.microsoft.com/power-platform/admin/opt-in-early-access-updates)
+
+## Check your access to a record
+
+
+1. Select a record and then select **Edit** on the command bar.
+
+    > [!div class="mx-imgBorder"]
+    > ![Select a record to edit it.](media/edit_record.png "Select a record to edit it")
+  
+2. On the open record, select **Check Access** on the command bar.
+3. The **Check Access** dialog box will appear and display your access information.
+
+
+    > [!div class="mx-imgBorder"]
+    > ![Access checker showing your access level.](media/check_access_page.png "Access checker showing your access level")
+    
+Contact your administrator if you don't have the required access. Only an administrator can edit your security role and privileges. To find your administrator, go to [Find your administrator or support person](https://docs.microsoft.com/powerapps/user/find-admin).
+
+
+## Check another user's access to a record
+
+If you're an administrator, you can check the access another user has to a record.
+
+1. Open a record, select **Check Access** on the command bar.
+2. In the **User Lookup** field select or enter a user name to search for the user.
+
+   > [!div class="mx-imgBorder"]
+   > ![Access checker showing your access level for an admin.](media/check_access_page_admin-1.png "Access checker showing your access level for an admin")
+  
+3.   The **Check Access** dialog box will appear and display the user's access information.