Power Apps (canvas apps) shared with everyone
AI summary
Rencore Governance identifies Power Apps canvas apps shared with everyone in your tenant. Review whether each app should be this widely available, and consider restricting sharing to specific security groups instead.
What it detects
Shows Power AppsPower AppsPower Apps is the Microsoft low-code tool for building business apps. Rencore Governance covers it with the Power Apps connector, part of the Apps, Automation & BI module.Read more that all users of current tenant can viewed and used.
Why it matters
An app shared with everyone can be opened by every user in your organization. If it uses a shared connection, for example SQL Server with a stored login, every one of those users can reach that data through the app. Check whether each app should be this widely available, share it with a security groupSecurity groupA security group is a Microsoft Entra group that gives a set of users access to resources.Read more instead if not, and consider limiting sharing with everyone in Managed Environments.
The rule
Every Power App (Canvas App) where Shared with everyone in tenant is true and App Type equals 'Canvas'
In Rencore Governance
Details
| Applies to | Power app (canvas app) |
|---|---|
| Connector | Power Apps |
| Severity | Information |
| Category | Security |
| Recommended | No |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check Power app (canvas app) objects:
- Power Apps requiring a premium license (Information)
- Power Apps (canvas apps) without owners (High)
Frequently asked questions
What does the Power Apps (canvas apps) shared with everyone policy detect?
The Power Apps (canvas apps) shared with everyone policy shows Power Apps that all users of current tenant can viewed and used.
Which objects does the Power Apps (canvas apps) shared with everyone policy check?
The Power Apps (canvas apps) shared with everyone policy checks Power app (canvas app) objects from the Power Apps inventory and reports each one that matches its rule as a violation.
How severe is a violation of the Power Apps (canvas apps) shared with everyone policy?
Violations of the Power Apps (canvas apps) shared with everyone policy have Information severity. The policy is in the Security category.
Which module includes the Power Apps (canvas apps) shared with everyone policy?
The Power Apps (canvas apps) shared with everyone policy comes with the Power Apps connector in the Apps, Automation & BI module of Rencore Governance, an add-on module on the Premium and Enterprise Plans.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?