2025-11-03

Prevent Dataverse Guest Access Data Leaks

Your Power App didn’t get “hacked”—it was over-permitted. Treating Dataverse like SharePoint (big buckets, broad roles) turns guest access into a data breach waiting to happen. Dataverse is a relational fortress built on granular privileges (Create/Read/Write/Delete/Append/Append To/Assign/Share), scoped access (User, Business Unit, Parent:Child, Organization), and Business Unit boundaries. One accidental Organization-level privilege on a guest or team role overwhelms every careful filter and exposes records across the environment. This episode shows the failure pattern (cloned roles, Parent:Child scope, team inheritance) and then the fix: isolate external users in their own Business Unit, build minimal guest roles from scratch, prefer Team ownership + Access Teams for precise sharing, apply Field-Level Security to sensitive columns, and automate join/leave via Entra ID. Close with gover

Apple Podcasts · Spotify · YouTube · YouTube Music

Prevent Dataverse Guest Access Data Leaks (English)