Dataverse Security - Simply Explained

Power Platform - Simply Explained

Welcome to another episode of Knowledge Nuggets with Mirko Peters. In this episode, we're exploring the Microsoft Power Platform—Microsoft's low-code ecosystem for building applications, automating business processes, analyzing data, and creating AI-powered experiences without traditional software development. Many organizations still rely on spreadsheets, email chains, paper forms, and disconnected business systems. Information lives in multiple places, employees spend hours copying data between applications, and repetitive work slows everyone down. Microsoft Power Platform solves this challenge by connecting your existing Microsoft 365 environment into one intelligent platform where business users and developers can build solutions together using little or no code. WHY POWER PLATFORM EXISTS Every business has repetitive work. Employees manually: * Copy information between systems * Process approval requests * Update spreadsheets * Create reports * Build temporary databases * Track projects * Exchange countless emails Traditional software development is often expensive and slow, while off-the-shelf applications rarely match every business process. Power Platform closes this gap by giving employees the tools to build applications, automate workflows, analyze information, and introduce AI—all while leveraging the Microsoft technologies organizations already use every day. POWER BI – UNDERSTAND YOUR DATA Power BI is the analytics component of the Power Platform. It transforms raw business data into interactive dashboards and reports that help organizations make informed decisions. Power BI connects to: * Excel * SQL Server * Dataverse * SharePoint * Salesforce * Azure * Hundreds of additional data sources Instead of manually creating reports every week, dashboards refresh automatically, giving managers real-time visibility into sales, operations, finances, and performance. Power BI becomes the "eyes" of the Power Platform, helping organizations understand what is happening across the business. POWER AUTOMATE – AUTOMATE THE WORK Once organizations understand their data, they often want to automate repetitive tasks. That's where Power Automate comes in. Power Automate uses simple triggers and actions to automate business processes. Typical scenarios include: * Approval workflows * Email notifications * Document processing * File synchronization * Task creation * Data movement * ERP integrations With more than 1,400 connectors, Power Automate connects Microsoft 365 with countless third-party services including Salesforce, Slack, Dropbox, DocuSign, and many others. Rather than employees repeating the same work every day, Power Automate performs those tasks automatically. POWER APPS – BUILD BUSINESS APPLICATIONS Power Apps provides the user interface for business processes. Instead of purchasing expensive custom software, organizations can build applications tailored to their own requirements. Power Apps supports two application models. Canvas Apps Designed visually using drag-and-drop controls. Perfect for: * Mobile apps * Inspection forms * Field workers * Simple business processes * Custom user experiences Model-Driven Apps Built around Dataverse tables and relationships. Ideal for: * CRM systems * HR solutions * Asset management * Customer databases * Enterprise applications Power Apps uses Power Fx, an Excel-inspired formula language that enables business users to create application logic without traditional programming languages. COPILOT STUDIO – ADD AI One of the newest members of the Power Platform is Microsoft Copilot Studio. Previously known as Power Virtual Agents, it has evolved into a platform for building AI agents that can: * Answer questions * Access business systems * Trigger Power Automate workflows * Retrieve organizational knowledge * Collaborate with other AI agents Organizations can deploy these agents inside: * Microsoft Teams * Websites * Mobile applications * Microsoft 365 Copilot With Agent-to-Agent communication, multiple AI agents can coordinate behind the scenes, allowing organizations to automate increasingly complex business processes. DATAVERSE – THE FOUNDATION Behind every Power Platform solution sits Microsoft Dataverse. Dataverse provides: * Secure cloud storage * Business tables * Relationships * Role-based security * Business rules * Centralized data management Instead of maintaining separate spreadsheets and disconnected databases, organizations create a single source of truth that every Power Platform component shares. Power Apps reads from Dataverse. Power Automate updates Dataverse. Power BI reports on Dataverse. Copilot Studio retrieves knowledge from Dataverse. This shared foundation allows every part of the platform to work together seamlessly. HOW EVERYTHING WORKS TOGETHER The real strength of the Power Platform isn't any individual product—it's how they integrate. Consider an expense approval process. An employee submits an expense using Power Apps. The information is securely stored in Dataverse. Power Automate detects the submission and routes it to a manager for approval. The manager reviews spending trends through a Power BI dashboard. A Copilot Studio AI agent summarizes the request and recommends an approval decision. Once approved, Power Automate updates financial systems, sends confirmation emails, and records everything automatically. Five different services collaborate to complete one seamless business process with minimal manual effort.  REAL-WORLD ADOPTION Organizations around the world are already using Power Platform to modernize operations. Companies build: * Employee onboarding solutions * Expense management systems * Customer service portals * Field inspection apps * Inventory management * Executive dashboards * AI-powered assistant Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

Dataverse Security - Simply Explained

Welcome to another episode of Knowledge Nuggets with Mirko Peters. In this episode, we're exploring Microsoft Dataverse Security—one of the most important, and often misunderstood, aspects of the Power Platform. When people hear the word security, they usually think about passwords, authentication, or Microsoft Entra ID. While those components are important, Dataverse security goes much further. It determines who can perform actions, which records they can access, and even which individual fields they are allowed to see. Understanding these layers is essential for building secure enterprise applications that protect sensitive business information while allowing employees to work efficiently. THE THREE LAYERS OF DATAVERSE SECURITY Dataverse security is built around three distinct layers that work together. The first layer controls what actions users can perform. The second layer determines which records users are allowed to access. The third layer protects individual fields inside those records. Rather than relying on a single permission model, Dataverse combines these layers to provide highly granular security suitable for enterprise environments. Understanding how they interact is the key to designing secure Power Platform solutions.  SECURITY ROLES – WHO CAN DO WHAT Everything starts with Security Roles. Every Dataverse user must have at least one security role before they can access any data. Security roles define privileges such as: * Create * Read * Write * Delete * Append * Assign * Share Microsoft provides several built-in roles, including: * Basic User * System Customizer * Environment Maker * System Administrator Most organizations create custom roles by copying the Basic User role and adding only the permissions required for their own business tables. Following the principle of least privilege reduces security risks while keeping administration manageable. ACCESS LEVELS – HOW MUCH DATA? Granting permission to read data isn't enough. Dataverse also defines how much data a user may access through Access Levels. The four primary scopes are: * User * Business Unit * Parent: Child Business Units * Organization For example, a salesperson might only see opportunities they own, while a sales manager can view opportunities belonging to everyone within the department. One important concept is that permissions are additive. If a user receives multiple security roles, Dataverse grants the broadest permission available. Additional roles never reduce existing permissions—they only increase them. Understanding this behavior helps administrators avoid accidentally granting more access than intended. BUSINESS UNITS – ORGANIZING ACCESS Business Units provide organizational separation. They typically represent departments such as: * Sales * Marketing * Finance * HR * Customer Support Every user belongs to a default Business Unit, and records can also belong to Business Units. Historically, Business Units created strict organizational boundaries, limiting users to records owned by their own department. Modern Dataverse introduces a much more flexible matrix access model, allowing users to receive security roles from multiple Business Units. This enables cross-functional collaboration without forcing organizations to redesign their entire hierarchy whenever employees work across departments or regions. TEAMS – SHARED OWNERSHIP While Business Units organize departments, Teams simplify collaboration. Dataverse supports two primary team types. Owning Teams Owning Teams own records collectively. Instead of assigning ownership to a single employee, an entire team becomes responsible for the record. This works particularly well for sales teams, service desks, and project groups where multiple people collaborate continuously. Access Teams Access Teams don't own records. Instead, they provide temporary or scenario-specific access without transferring ownership. Microsoft also integrates Teams with Microsoft Entra ID security groups, allowing administrators to manage membership centrally while Dataverse automatically synchronizes permissions. This significantly reduces administrative effort in larger organizations.  FIELD-LEVEL SECURITY Sometimes protecting an entire record isn't enough. Sensitive information may exist in only one or two fields. Examples include: * Salary * Tax IDs * Credit card numbers * Social security numbers * Banking details Field-Level Security (FLS) protects individual columns inside a Dataverse table. Administrators create Field Security Profiles that specify which users or teams may: * Read * Update * Create secured fields. Even users with Organization-level table permissions cannot view secured columns unless they are explicitly included in the appropriate Field Security Profile. This makes FLS one of the most powerful security mechanisms available within Dataverse. MASKING AND BEST PRACTICES Recent Dataverse enhancements introduced column masking, allowing organizations to partially display sensitive information. Instead of revealing an entire credit card number, users may only see the final four digits. Masking occurs on the server, ensuring consistent protection across forms, APIs, reports, and applications. Additional protections include: * App Access Control * Offline security * Server-side enforcement * Secure mobile synchronization Microsoft recommends applying Field-Level Security only to truly sensitive columns because excessive use can increase complexity and affect performance. The recommended approach is: 1. Security Roles 2. Business Units and Teams 3. Field-Level Security only where necessary Each layer should solve a specific problem rather than being applied everywhere COMMON TROUBLESHOOTING SCENARIOS Many Dataverse security issues follow familiar patterns. A common mistake is creating a custom security role while forgetting to assign the Basic User role, preventing users from accessing the environment. Another frequent misunderstanding involves additive permissions. Assigning another security role never removes existing permissions—it only grants additional access. Administrators should also verify: * Business Unit ownership * Team ownership * Access Levels * Field Security Profiles A user may have full table permissions yet still be unable to view a field because Field-Level Security overrides table-level access for secured columns. Knowing where to investigate dramatically reduces troubleshooting time. Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

Power Pages - Simply Explained

Welcome to another episode of Knowledge Nuggets with Mirko Peters. In this episode, we're exploring Microsoft Power Pages, Microsoft's low-code platform for building secure, external-facing business websites. Modern organizations need more than marketing websites. They need customer portals, partner hubs, supplier dashboards, volunteer registration sites, and self-service platforms that connect directly to business data. Traditionally, building these solutions required web developers, expensive hosting, and months of development. Power Pages changes that by allowing organizations to build secure, data-driven websites that integrate seamlessly with Microsoft 365 and Dataverse—without starting from scratch. WHAT IS POWER PAGES? Power Pages is Microsoft's low-code platform for building external business websites. Unlike Power Apps, which focuses on internal employee applications, Power Pages is designed for users outside your organization, including: * Customers * Partners * Suppliers * Vendors * Contractors * Citizens * Volunteers Think of Power Pages as the secure front door to your business data. Visitors can securely log in, submit forms, check information, update records, and interact with your business processes while Microsoft manages the hosting, infrastructure, security, updates, and scalability behind the scenes. Rather than creating static websites, Power Pages creates interactive business portals connected directly to live enterprise data. FROM POWER APPS PORTALS TO POWER PAGES Power Pages wasn't built from scratch. Originally known as Power Apps Portals, Microsoft rebranded the product in 2022 to give it its own identity within the Power Platform. Today, Power Pages stands alongside: * Power Apps * Power Automate * Power BI * Microsoft Copilot The redesign introduced: * A modern Design Studio * Simplified licensing * Improved security * Better development experience * AI-assisted website creation Existing Power Apps Portal customers were automatically upgraded without rebuilding their sites. DATAVERSE: THE FOUNDATION Every Power Pages website is built around Microsoft Dataverse. Dataverse stores business information such as: * Customer accounts * Orders * Support tickets * Inventory * Projects * Service requests Power Pages acts as the presentation layer while Dataverse stores the underlying business data. When a customer submits a support request, updates their profile, or checks an order status, they're interacting directly with Dataverse through a secure server-to-server connection. Because Power Pages connects directly to live business data, organizations eliminate manual imports, spreadsheets, and duplicate data entry. Microsoft has also introduced Native Dataverse Authorization, allowing external users to receive security permissions directly within Dataverse, providing stronger security, improved auditing, and more granular access control. BUILDING SITES WITH DESIGN STUDIO Power Pages includes a visual Design Studio that simplifies website creation. The experience is divided into four primary workspaces. Pages Create pages visually using drag-and-drop controls, including: * Text * Images * Forms * Lists * Navigation * Sections Every form can connect directly to Dataverse tables. Styling Customize: * Branding * Fonts * Colors * Themes * Layout Most websites require little or no CSS customization. Data Manage: * Dataverse tables * Forms * Views * Relationships Without leaving the Design Studio. Setup Configure: * Site settings * Authentication * Integrations * AI capabilities * Go-live configuration Everything needed before publishing your website. SECURITY BY DESIGN Security is one of Power Pages' strongest features. New sites are private by default, preventing accidental exposure before administrators intentionally publish them. Microsoft provides enterprise-grade protection including: * Web Application Firewall (WAF) * Content Delivery Network (CDN) * DDoS protection * Microsoft Entra ID integration * SSL certificates * Managed hosting Authentication supports providers including: * Microsoft accounts * Google * LinkedIn * OpenID Connect * SAML identity providers Organizations define Web Roles that determine which users can access pages and which records they can view or modify. Combined with Table Permissions, Power Pages enforces row-level security so users only see the business information they are authorized to access. Microsoft also introduced Deep Scan, which analyzes websites for security weaknesses and recommends improvements before production deployment. LICENSING Power Pages uses standalone licensing separate from Power Apps. Pricing is based primarily on: * Authenticated users * Anonymous website visitors Organizations can start with a free 30-day trial that includes Dataverse storage and full development capabilities. Because Microsoft manages hosting, infrastructure, maintenance, security, and updates, organizations avoid the operational complexity of traditional web hosting platforms while benefiting from predictable cloud pricing. Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

Power Apps - Simply Explained

Welcome to another episode of Knowledge Nuggets with Mirko Peters. In this episode, we're exploring Microsoft Power Apps, Microsoft's low-code platform for building custom business applications without traditional software development. Every organization has processes that deserve a dedicated app—equipment tracking, expense reporting, employee onboarding, inspections, approvals, or customer management. Traditionally, building these applications required software developers, long development cycles, and significant budgets. Power Apps changes that by allowing business users, citizen developers, and IT professionals to build secure business applications using visual tools, familiar Excel-style formulas, and deep integration with Microsoft 365. WHAT IS POWER APPS? Power Apps is part of the Microsoft Power Platform, alongside: * Power Automate * Power BI * Power Pages * Microsoft Copilot Its purpose is simple: build business applications quickly without writing thousands of lines of code. Developers design screens visually by dragging controls such as buttons, galleries, forms, text boxes, and images onto a canvas. Logic is created using Power Fx, a formula language inspired by Microsoft Excel, making it approachable for users who already work with spreadsheets. Power Apps connects directly to Microsoft 365 services including SharePoint, Teams, Outlook, OneDrive, and Dataverse, while also supporting hundreds of external systems through connectors. LOW-CODE DOESN'T MEAN NO-CODE Power Apps is often described as a low-code platform. Rather than writing complex C# or JavaScript applications, users build solutions visually while adding simple formulas only where needed. If you've used Excel formulas such as IF(), SUM(), or FILTER(), you'll quickly recognize the Power Fx syntax. The goal isn't to eliminate coding completely—it is to dramatically reduce the amount of technical knowledge required to create professional business applications. This allows departments to solve their own business problems instead of waiting months for traditional software development projects.  CANVAS APPS VS. MODEL-DRIVEN APPS Power Apps offers two primary application models. Canvas Apps Canvas Apps begin with a blank screen. Developers decide exactly where every button, image, gallery, and control appears, providing complete flexibility over the user experience. Canvas Apps work best for: * Mobile applications * Inspection forms * Approval apps * Dashboards * Simple business processes * Task-specific applications They're ideal when the user experience matters most. Model-Driven Apps Model-Driven Apps start with the data rather than the interface. Developers define tables, relationships, and business rules, while Power Apps automatically generates forms, navigation, and views. Model-Driven Apps are perfect for: * CRM systems * HR portals * Asset management * Project tracking * Customer databases * Complex enterprise applications Instead of designing every screen manually, developers focus on modeling the business data. DATAVERSE: THE FOUNDATION Behind many Power Apps solutions is Microsoft Dataverse. Dataverse is Microsoft's cloud-native business database built specifically for the Power Platform. It provides: * Secure tables * Relationships * Business rules * Role-based security * Data validation * Enterprise scalability Canvas Apps can connect to Dataverse or hundreds of other data sources. Model-Driven Apps require Dataverse as their primary data platform because they depend on its structured business data model. As organizations grow, Dataverse often becomes the preferred data source because it provides significantly more governance and scalability than spreadsheets or SharePoint lists. CONNECTING TO BUSINESS DATA One of Power Apps' greatest strengths is connectivity. Through more than 300 connectors, applications can integrate with: * SharePoint * Microsoft Teams * Outlook * OneDrive * Excel * SQL Server * Salesforce * SAP * Oracle * Google services * Dropbox * REST APIs * Custom business systems Instead of replacing existing applications, Power Apps extends them by creating modern business interfaces that connect directly to current data sources. MICROSOFT 365 INTEGRATION Power Apps fits naturally into the Microsoft ecosystem. Applications can run: * Inside Microsoft Teams * In any web browser * On iOS and Android devices * Embedded within SharePoint pages Security is managed through Microsoft Entra ID, meaning users authenticate using their existing Microsoft 365 accounts. Administrators control permissions using familiar Microsoft identity management tools while the Power Platform Admin Center provides centralized governance, environment management, and Data Loss Prevention policies. This deep integration allows organizations to deploy business applications without introducing separate identity systems or security models. BUILDING YOUR FIRST APP Creating a Power App is remarkably simple. Users can begin with an Excel spreadsheet or SharePoint list. Power Apps automatically generates: * A Browse screen * A Details screen * An Edit screen From there, developers customize colors, branding, layouts, business rules, and navigation while Power Apps handles much of the underlying application framework automatically. What once required weeks of custom software development can often be completed in less than an hour. AI AND COPILOT IN POWER APPS  Power Apps has changed dramatically with the introduction of Microsoft Copilot. Instead of manually designing every application, developers can now describe the app they want using natural language. For example: "Create an expense approval application with manager approvals and monthly reporting." Copilot can generate: * Screens * Navigation * Tables * Business logic * Forms * Power Fx formulas Copilot also assists users inside running applications by summarizing records, generating visualizations, answering questions about business data, and helping users find information faster. With the 2026 Wave 1 release, Copilot became generally available for Model-Driven Apps and introduced autonomous AI agents capable of coordinating routine business activities with minimal user intervention. Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].

Power Automate - Simply Explained

Welcome to another episode of Knowledge Nuggets with Mirko Peters. In this episode, we're exploring Microsoft Power Automate, one of the most powerful productivity tools in the Microsoft ecosystem. Many people think Power Automate is simply a workflow tool or "that flow app" hidden somewhere inside Microsoft 365. In reality, it's a business automation platform that connects hundreds of applications and services, eliminating repetitive manual work without requiring you to write code. Whether you're automating approvals, processing forms, managing documents, or integrating business systems, Power Automate helps you work smarter while saving countless hours every week. WHY POWER AUTOMATE EXISTS Every organization spends countless hours performing repetitive tasks. Employees manually: * Copy information between systems * Forward emails * Move documents * Update spreadsheets * Create tasks * Request approvals * Send notifications While these activities are essential, they rarely create business value. They consume time, introduce human error, and prevent employees from focusing on more meaningful work. Before Power Automate, automating these processes often required expensive enterprise software or custom development. Microsoft changed this by creating a platform where anyone can automate business processes using a visual interface instead of writing code. THE CORE CONCEPT: TRIGGERS AND ACTIONS At its heart, Power Automate is built around two simple concepts. A Trigger determines when automation begins. Examples include: * A new email arrives * A SharePoint file is created * A Microsoft Form is submitted * A Teams message is posted * A scheduled time occurs Once the trigger fires, Power Automate executes one or more Actions. Actions can include: * Sending emails * Creating files * Updating SharePoint lists * Posting Teams messages * Creating Planner tasks * Updating Excel rows * Calling external APIs Everything inside Power Automate is built from these simple building blocks. The entire platform can be summarized as: When this happens... do that. THE THREE TYPES OF FLOWS Power Automate supports three primary flow types. Automated Flows Automated flows run whenever an event occurs. Examples include receiving a customer email, uploading a document, or creating a new SharePoint item. Once configured, these flows run entirely in the background without user interaction. Instant Flows Instant flows begin when a user manually starts them. These can be launched from: * Microsoft Teams * SharePoint * Mobile devices * The Power Automate app They're perfect for actions such as requesting approvals or generating reports on demand. Scheduled Flows Scheduled flows execute at predefined intervals. Examples include: * Daily reports * Weekly reminders * Monthly backups * Recurring maintenance * Data synchronization These automations operate on timers rather than user activity or business events. CONNECTORS: THE REAL SUPERPOWER Power Automate becomes incredibly powerful because of Connectors. A connector allows Power Automate to communicate with another application or service. Microsoft currently provides more than 1,400 connectors, including: * SharePoint * Outlook * Teams * OneDrive * Excel * Dynamics 365 * Salesforce * Adobe * DocuSign * Google Workspace * Mailchimp * Twitter * Thousands of additional services Each connector exposes its own triggers and actions, allowing organizations to connect virtually every part of their technology landscape. If no connector exists, developers can even create custom connectors for their own APIs. CLOUD FLOWS VS. DESKTOP FLOWS Power Automate actually includes two different automation technologies. Cloud Flows Cloud Flows run entirely inside Microsoft's cloud infrastructure. They automate cloud services using APIs and connectors without requiring your computer to remain online. These are ideal for Microsoft 365, Dynamics 365, SharePoint, Teams, Outlook, and modern SaaS platforms. Desktop Flows Desktop Flows use Robotic Process Automation (RPA). Instead of calling APIs, they literally interact with software like a human user by: * Moving the mouse * Clicking buttons * Typing text * Reading screen content * Copying information * Opening applications Desktop flows are especially valuable for older legacy applications that don't provide APIs or modern integration capabilities. BUILDING COMPLETE BUSINESS PROCESSES The true value of Power Automate comes from combining multiple actions into complete business workflows. Imagine a customer submits a contact form. Power Automate can automatically: * Save the submission to SharePoint * Find the correct salesperson * Send a Teams notification * Create a Planner task * Log the interaction in Excel * Send a confirmation email What previously required multiple people and several applications now happens automatically in seconds. Rather than automating individual tasks, Power Automate automates entire business processes. REAL-WORLD USE CASES Organizations use Power Automate across nearly every department. HR teams automate employee onboarding and vacation requests. Finance teams process invoice approvals and expense reports. Sales teams synchronize CRM information and customer notifications. IT departments automate user provisioning, ticket routing, and system monitoring. Managers receive scheduled reports without manually gathering data. Marketing teams connect forms, mailing lists, social media platforms, and approval workflows. The possibilities continue to expand as additional connectors become available.  Become a supporter of this podcast: https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support [https://www.spreaker.com/podcast/m365-fm-modern-work-security-and-productivity-with-microsoft-365--6704921/support?utm_source=rss&utm_medium=rss&utm_campaign=rss].