Restrict Creation of PowerApps Portals

With portals moving into the make.powerapps.com as a first class application type this hugely widens the audience and makes the portal accessible to the general everyday user of the platform. But what if as administrator of your tenant you don’t want Joe or Jane from accounting to install a portal freely in the environments they have access to. Maybe you need a more ridged process.

Luckily there is a way for administrators to turn off the ability for non-admin users to create portals. As with the ability to turn off environment creation for non-admin users there is also a setting for portals.

The PowerApps Admin PowerShell cmdlets provide a way for you to read and set the settings for PowerApps on your tenant. One of the settings for PowerApps happens to be disablePortalsCreationByNonAdminUsers. Setting this to true will block Joe or Jane from creating those portals.

Here is an example PowerShell command to set the restriction. By default create is enabled for everyone.

$settings = @{ disablePortalsCreationByNonAdminUsers = $true }
Set-TenantSettings $settings

If you don’t already have the PowerShell modules for PowerApps installed just run the following command in PowerShell.

Install-Module -Name Microsoft.PowerApps.Administration.PowerShell -AllowClobber -Force
Install-Module -Name Microsoft.PowerApps.PowerShell -AllowClobber -Force

Your organization will need to decide just like for environment creation how open you will be for the creation of new portals. There are a lot of reasons to be open and enable users to freely create content in whatever form they want, and don’t stifle innovation. On the flip side enterprises have bills to pay, and security policies or standards that must be followed for various reasons. These settings provide the flexibly to meet both opinions.