Dataverse Record Visibility by BU/Team

Question

I'm new to Dataverse and building an app. I have multiple business units (like departments) in my Power Platform environment. Each business unit has two teams: Approvers and End Users.

I need to set up Dataverse so that:

• End Users in a business unit can only see their own records. For example, an End User in Business Unit #1 can only see records they created or that are assigned to them.

• Approvers in a business unit can see all records for that business unit. So, an Approver in Business Unit #1 can see all records related to Business Unit #1.

• Users in different business units can't see each other's data. Users in Business Unit #1 shouldn't see any records from Business Unit #2, and vice-versa.

Is this possible?

Answer 1

Yes, Dataverse supports role based security. Privileges for tables (Create, Update, Delete, Read, Assign a.o.) can have a depth:

• User
• Business Unit
• BU + underlying BUs
• Organization

See also: Security roles and privileges | MS Learn