Hello all-
First I apologize if I am in the wrong place, I am new to model driven apps, but the only results I was finding for my specific error were in this forum.
I am trying to share a model driven app and followed the directions here (https://docs.microsoft.com/en-us/powerapps/maker/model-driven-apps/share-model-driven-app) and created a security role in the Dynamics Security UI, then added my new entities to that role ( One entity with several fields), then added that role to users, then added that role to my app. No Luck, users still not able to access the app.
I have two other admins that I am using to test and even after I have verified they have the system Administrator role, they still cannot access the app, and this is the error received (in edge, to make sure it wasn't a chrome cache issue)
- Error Code: 2147746336
- Session Id: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
- Timestamp: Wed Mar 06 2019 11:46:06 GMT-0500 (Eastern Standard Time)
Principal user (Id=XXXXXXXXXXXXXXXXXXXXXXXXXX, type=8, roleCount=1, privilegeCount=555, accessMode=1(Setup/Stub user with filtered privileges from associated roles. Consider changing user AccessMode to Full (without privilege filtering)), is missing prvReadAppModule privilege (Id=XXXXXXXXXXXXXXXXXXXXXXXX) on OTC=9006
at Microsoft.Crm.Extensibility.OrganizationSdkServiceInternal.Execute(OrganizationRequest request, InvocationContext invocationContext, CallerOriginToken callerOriginToken, WebServiceType serviceType, Boolean checkAdminMode, ExecutionContext executionContext, Dictionary`2 optionalParameters) at Microsoft.Crm.Extensibility.OData.CrmODataExecutionContext.Execute(OrganizationRequest request, ExecutionContext executionContext) at Microsoft.Crm.Extensibility.OData.CrmODataServiceDataProvider.ExecuteOperation(CrmODataExecutionContext context, EdmOperation edmOperation, Dictionary`2 parameters, Dictionary`2 boundParameters) at Microsoft.Crm.Extensibility.OData.ActionController.ProcessOperationRequest(String operationName, Dictionary`2 operationParameters, EntityReference entityReference, String boundEntityName, String boundEntityType) at Microsoft.Crm.Extensibility.OData.ActionController.<>c__DisplayClass12_0.<GetUnboundFunction>b__0() at Microsoft.PowerApps.CoreFramework.ActivityLoggerExtensions.Execute[TResult](ILogger logger, EventId eventId, ActivityType activityType, Func`1 func, IEnumerable`1 additionalCustomProperties) at Microsoft.Xrm.Telemetry.XrmTelemetryExtensions.Execute[TResult](ILogger logger, XrmTelemetryActivityType activityType, Func`1 func) at lambda_method(Closure , Object , Object[] ) at System.Web.Http.Controllers.ReflectedHttpActionDescriptor.ActionExecutor.<>c__DisplayClass10.<GetExecutor>b__9(Object instance, Object[] methodParameters) at System.Web.Http.Controllers.ReflectedHttpActionDescriptor.ExecuteAsync(HttpControllerContext controllerContext, IDictionary`2 arguments, CancellationToken cancellationToken) --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Web.Http.Controllers.ApiControllerActionInvoker.<InvokeActionAsyncCore>d__0.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Web.Http.Controllers.ActionFilterResult.<ExecuteAsync>d__2.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Web.Http.Dispatcher.HttpControllerDispatcher.<SendAsync>d__1.MoveNext()
Sorry if I am being over cautious with the XXXXs but better safe than sorry. So from parsing this, I can see that Dynamics is upset that the user is missing prvReadAppModule privilege, but I cannot find that anywhere in security roles. I found this...(https://docs.microsoft.com/en-us/dynamics365/customer-engagement/web-api/appmodule?view=dynamics-ce-odata-9) but nothing that is exactly prvReadAppModule, so I am at a loss.
When I open and run the app, or view the data in the entity, or add to the data using a canvas app or enter data directly, everything works great...now if I can just figure out how to get others to be able to use it...
Any thoughts from anyone would be greatly appreciated, even a point in the right direction if this is the wrong place.
Thank you in advance!!
-Sam