Security

The EXM platform has security controls in place to allow only authorized staff and users to view, open, modify, authorize, and close records based on their role.

The security roles of the EXM platform are as follows.

1. System Administrator
2. Enterprise Service Management-Super Admin
3. Enterprise Service Management Fulfiller
4. Problem Request Fulfiller-ESM
5. Data Administrator
6. End User Service Management
7. Basic User

System Administrator

The System Administrator has complete control over the environment and can add or remove users from other Security Roles. The System Admin can add or remove users.

Add or remove users

1. Go to the Microsoft power Platform admin center, select the environment to which you want to add users.
2. Select Settings > Users + permissions > Users. You will see the list of users that are already been added to the environment.
3. If the user is not present, then we can add Select Add User.

4. In the add user panel enter the user’s name or email address and then click on Add.

5. Select Refresh to see the added user in the list.

Refer to the link.https://docs.microsoft.com/en-us/power-platform/admin/add-users-to-environment

Assign a Security role to the user

1. Go to power platform admin center (Signed in as support team).
2. Open the environment to be shared.
3. Select “see all” under the “users.”
4. Select the user to assign security roles to them and click on manage security roles.

5. Select the roles to be assigned to the user. The user should have basic user role as well. The app should be later shared with the roles so that the user can have access.

6. Click on Save.

Share the application

1. Go to the apps list on the power apps screen.

2. Select the app to be shared and click on the share button.

3. A dialog box will appear. Select the app name on the left side.

4. Select the roles from the dropdown that should have access to app.

5. Click on the share button.
6. Share the link of the environment with the users to access the app.

Enterprise Service Management-Super Admin

Has full access to the application.

Enterprise Service Management Fulfiller

Can read, create, update the Record but cannot Delete the Record and have only read access in the Administration Section.

Problem Request Fulfiller-ESM

Can read, create, update the Problem but cannot Delete the Record and have only read access in Administration Section.

Data Administrator

Can directly export data into Excel, modify it and then upload the data back into the system. A transfer occurs then data is processed and then an update into the final table.

End User Service Management

Can only view the EXM Portal and create the incident.

Basic User

Can run an app within the environment and perform common tasks for the records that they own. Note that this only applies to non-custom entities.