Power Platform administrator

Also known as: Power Platform Administrator, Power Platform admin

Power Platform Administrator is a Microsoft Entra admin role that can manage Power Platform environments, Power Apps, flows and data loss prevention policies in the tenant.

Rencore Governance scans Power Apps and Power Automate with delegated permissions, so the account that gives consent is also the account used for scanning. That account must hold the Power Platform Administrator role.

If the account is set up wrong, the scan fails or returns incomplete data. You then need to give consent again with a correctly set up account.

For example, Copilot Studio also needs a Power Platform Administrator. That person runs a PowerShell script once on Windows to register your Entra ID app as a Power Platform management application.

Use a dedicated account for the consent. Microsoft requires multifactor authentication for administrators, so set up MFA for this account, or Microsoft revokes the permissions.

Requirements for the consent account

The role is assigned permanently and without restrictions, not only for a limited time through Privileged Identity Management. The account has the Power Apps for Office 365 (Plan 3) and Power Automate for Office 365 licenses. It must not be a Global Administrator, because Microsoft does not let that role use the Power Platform Administrator APIs. It is not part of many groups and holds few other roles.