Azure-Samples / Azure-Samples/Copilot-Studio-with-Azure-AI-Search

[Feature] Accept Entra User or Security Groups as Input

Open
#123 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
HCL
Stars
31
Forks
8
PR merge metrics
No merged PRs in 30d

Description

### Description

Right now, the solution requires a list input of individual Entra object IDs to specify which users to add to the Power Platform environment and the Power Platform connections, and it then uses the powerplatform_user resource to set up the user(s). This parameterized list approach is somewhat redundant given that Entra already provides a mechanism to define user groups in user and security groups. Power Platform exposes an Entry Security group parameter for access control in the environment settings; we should consider using this mechanism to set up environment access rather than the user-by-user setup we're doing now. Not only does it reduce the redundancy; for minimum access, we wouldn't have to set up security roles, as users in the environment security group are automatically initialized as basic users when they first log in.

### User Story

AS A user of this solution I WANT a way to use my existing Entra security groups to configure Power Platform access SO THAT I'm not burdened with maintaining two separate user lists in this solution as well as Entra itself.

### Definition of Done

```markdown
- A user of this architecture can specify EITHER individual users OR Entra security groups and achieve expected Power Platform environment access at the end of the deployment.
```

### Values Provided

Reduces maintenance overhead for users by removing the requirement for redundant user group definitions.

### Additional Information

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.