Roles & Permissions for Individual access to Apps

[l.malherbe]

Product: PowerShell Universal
Version: 5.5.4

Hello !

I have multiple Apps and I wanted to create dedicated Roles to assign read access to users.
I would like my users to only have access to these apps and nothing more in Powershell Universal.

I created a first dedicated Role without nested roles included :

Then I created permissions :

(for the test I even add All permission on apps/*)

Then I added the Role to my Identity :

And configure permission on the App :

But it doesn’t work my user can access the portal, see the App ressource, but when I click on it

I have a page with this error:

Then I’m directly redirected to unauthorized page.

Do you know what am I doing wrong here?
I tried mutliple things like add nested role User; add all permissions for this role; etc… But nothing works ^^

Thanks for your help!

[parzog]

Minified React Error 31 indicates an issue with the rendering within the app itself - do you see that error from another account?

Regarding access, you shouldn’t need to give the role any permissions in order to allow them access to those apps. Once you create the role, you can leave the permissions empty, then simply add the role to that security tab on the app (which you have already done). Can you test with no permissions applied? I’m currently using this exact method to give users access ONLY to that app, where they also receive access to the Portal for a method to access the app in question.

Just for some QOL for them, I also configured the Default Route in the role definition as well.

[l.malherbe]

Hey @parzog !
Thanks for your reply

That got me on the right track ^^

I forgot I defined authorization per pages too; so since the beginning my user had the good access to the apps but none of its pages

By adding this role to the pages everything is fine now; and indeed I removed all permissions on that role

Thanks again for your help !