| title | description | author | ms.topic | ms.custom | ms.date | ms.subservice | ms.author | ms.reviewer | contributors | |||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
Tutorial: Display data securely on your site |
Learn how to set up table permissions and link to web roles. |
gitanjalisingh33msft |
tutorial |
template-tutorial |
11/04/2022 |
gisingh |
kkendrick |
|
In the previous tutorial, you added a list to a page; however, users wouldn't be able to view any data. Power Pages has security enabled by default to protect your business data. This tutorial will walk through the steps to create table permissions and associate them to web roles to allow visitors to your site to be only able to interact with the information that you allow.
In this tutorial, you learn how to:
[!div class="checklist"]
- Create table permissions
- Set access type and privileges
- Add web roles
- A Power Pages subscription or trial. Get a Power Pages trial here.
- A Power Pages site created. Create a Power Pages site.
- Complete the Add and design a page tutorial.
- Complete the Add a list to a page tutorial.
This video provides an overview of the steps to create table permissions.
[!VIDEO https://www.microsoft.com/videoplayer/embed/RE4XTcK]
Use the steps below to learn how to configure table permissions to view data.
-
Go to Power Pages.
-
In the pages workspace on the page where you have a list component, select the component and choose the Permissions button.
-
Select New table permissions.
-
Give table permission a name.
-
Select a Dataverse table.
-
Set the access type to Global.
-
Set the permissions to Read.
-
Choose Anonymous and Authorized user for the web roles.
:::image type="content" source="media/tutorial/create-table-permissions.png" alt-text="Create a table permission.":::
-
Now that table permissions are set, view the page by selecting Preview.
-
You should now see a list of Dataverse records on the page.
Note
You can give the table permission any name, but ideally it should be descriptive.
When you configure a list or a form in Power Pages, by default your users won't have access to the information in Dataverse. There are instances where you would want to limit what data a particular set of users. This can be done with a combination of table permissions and security roles.
If your table in Dataverse has a relationship with a Contact or Account table, you can filter the records based on that relationship.
In the example below, we've created a table that has a lookup to the contact table.
This video provides an overview of the steps to set access types and privileges.
[!VIDEO https://www.microsoft.com/videoplayer/embed/RE4XTcJ]
-
Create a page with a list showing records that have a relationship to the contact table.
[!NOTE] Go to Tutorial: Add list to a page for details on how to a list to page. Create a table with a lookup to the contact table.
-
From the list on the page, choose on the Permission button.
-
Select to create a new table permission.
-
Give the table permission a name and choose Table.
-
Select Access type Global access.
-
Set permissions to Read.
-
Assign the Table permission to the Authenticated user web role.
-
Select Save.
:::image type="content" source="media/tutorial/create-table-permissions-application.png" alt-text="Create a table permission for table with contact lookup.":::
-
Preview the site and sign-in. For purposes of this tutorial, you can sign in using Microsoft Entra ID.
-
View the page on the site. When any user signs in, they should see all the data in the table.
:::image type="content" source="media/tutorial/list-view.png" alt-text="Logged in user viewing all data on a page.":::
-
In our example, we would only want to show records that related to the currently signed-in user. Return to the design studio, select the list on the page and select permissions.
-
Modify the existing table permission and change the Access Type to Contact Access.
-
You'll need to specify the relationship between your table and the contact table.
[!NOTE] If you don't see a relationship, you will need to define a lookup to the contact table using the Data workspace. Create or update some records that are related to the contact record you are using to sign-in to the site.
:::image type="content" source="media/tutorial/filtered-list.png" alt-text="View a table that is filtered by the currently signed in user.":::
-
Preview the site and sign-in. You now should only see records that are related to the contact that has signed in to the site.
:::image type="content" source="media/tutorial/filtered-list-contact.png" alt-text="List view only showing related records.":::
There are several different access types and privileges in Power Pages.
For more information, see:
In our examples so far, we've assigned the table permissions to the default Authenticated Users and Anonymous Users web roles.
This video provides an overview of using web roles.
[!VIDEO https://www.microsoft.com/videoplayer/embed/RE4XQbL]
We can also create our own custom web roles to further limit access to data and pages to certain site visitors.
-
In the design studio, select the ellipses ... from the side menu and select Portal Management to open the Portal Management app.
-
In the Portals Management app, under the Security section, select and view Web Roles.
-
Select New to create a new web role and give it a descriptive name. Leave the Authenticated Users and the Anonymous Users roles set to No.
:::image type="content" source="media/tutorial/create-webrole.png" alt-text="Create web role.":::
-
Save the web role record.
-
Select Related and choose Contacts. Select Add existing contacts choose a few contacts.
:::image type="content" source="media/tutorial/add-contacts-webrole.png" alt-text="Add contacts to web role.":::
[!NOTE] Site users are stored as Contacts records.
-
Within the design studio on a list or a form, choose the permissions button and select a table permission, then assign the custom web role.
:::image type="content" source="media/tutorial/assign-student-webrole.png" alt-text="Assign the student web role.":::
[!NOTE] You'll need to restart the design studio or clear the browser cache (ctrl + F5) to see the new web role.
-
Preview the site and note that only users logged in will be able to view the data on a form or list.
Showing data in a list view to the correct audience is an important feature of Power Pages. The next tutorial will cover adding a form to a page to allow users to create and edit business data.
[!div class="nextstepaction"] Add a form to a page