Removing a user from a Power App typically involves removing their permission to access or use that specific application. There are primarily two ways a user might lose access to a Power App: by removing their sharing permissions for that particular app, or by disabling or deleting their user account at the Power Platform or Azure AD level, which impacts their access to all resources.
Here's how you can remove a user's access to a specific Power App or understand the implications of user deletion at the platform level:
1. Removing Access to a Specific Power App (Sharing)
The most common method for removing a user's ability to use a particular Power App is by managing the app's sharing settings. This method removes their access only to that specific app, without affecting their overall user account status or access to other Power Apps or resources.
- Locate the App: Go to the Power Apps portal.
- Find the App: Select Apps from the left navigation pane.
- Manage Sharing: Hover over the app you want to manage, click the ... (More commands) button, and then select Share.
- Remove the User or Group: In the sharing panel, find the user or Microsoft Entra ID (formerly Azure AD) security group whose access you want to remove. Click the 'X' next to their name.
- Save Changes: Click Share at the bottom to save your changes.
Once you remove a user or group from the sharing list, they will no longer be able to launch or use that specific Power App.
2. Managing Users at the Power Platform or Azure AD Level
Removing a user's access can also occur by managing their user account outside of the individual app's sharing settings. This is typically done by administrators and affects the user's ability to access all resources within the environment or tenant, including all Power Apps, flows, dataverse data, etc.
When a user account is disabled or permanently deleted from Microsoft 365, Microsoft Entra ID, or the Power Platform Admin Center, they will lose access to all Power Apps and other Power Platform resources associated with that account.
It's important to note the state of a user after they are deleted or disabled at this platform level. As observed in user management interfaces within the Power Platform:
- A deleted user often appears in a disabled state.
- Even in this disabled state, the user may still be listed as having security roles assigned to them and team membership.
While these assignments might visually persist for administrative tracking or cleanup purposes, the user, being disabled or deleted, cannot actively utilize these roles or team memberships to access resources or apps. Their ability to sign in and interact with the Power Platform is removed.
Removing a user's access to a Power App, therefore, depends on whether you need to restrict access to a single app (using sharing) or remove their ability to access the Power Platform entirely (via user account management).
