Good governance in Power Pages is important. In this blog, I’ll show how organisations can manage Microsoft’s Power Platform effectively. Specifically, I’ll provide the Governance controls, such as anonymous access to the dataverse, external authentication providers and site visibility to public access.
Disable anonymous access to Dataverse
This section shows you how to turn off anonymous access, so only logged-in users can view Dataverse data. Doing this keeps your information safe and prevents unwanted exposure.
| Option | Description |
| None of the sites |
If you choose None of the Sites, anonymous users will be able to see data across all sites, since table permissions allow it.
|
| Specific sites |
If you pick Specific Sites, you can block anonymous access to the sites you select. This will override earlier settings and stop access to Dataverse data.
|
| All sites except specific sites |
If you select All Sites Except Specific Sites, anonymous access is blocked everywhere except for the sites you choose. This also replaces any earlier settings.
|
| All sites |
If you choose All Sites, anonymous access is blocked for the entire tenant and any permissions that allowed it before are replaced.
|
Enable external authentication providers for your end users
This section shows you how to set up external authentication in Microsoft Power Pages. It covers the setup steps, security tips, and ways to make sign-in easier.
| Option | Description |
| All sites |
This option turns on external authentication for all tenant websites when selected. It is the default setting.
|
| All sites except specific sites |
This setting allows external authentication on all websites except the ones you exclude. Outside users will not be able to access those excluded sites.
|
| Specific sites |
This option lets you allow external authentication only on the websites you choose. Other sites will block outside users.
|
| None of the sites |
This setting blocks external authentication on all websites. Only internal users will have access.
|
Set site visibility to public access for non-production sites
| Option | Description |
| Set site visibility to Public |
To let anyone with the link access your site, set its visibility to Public.
|
| Keep site visibility Private during development | Keep your site set to Private if you want only certain internal users to access it. This is the best choice before you make the site public. |
| Non-production governance enforcement (block public changes) | If you want to change a site from Private to Public in a non-production environment, you need to get approval first. |
| Revert to Private |
If your site is Public, you can switch it back to Private at any time to control who can access it.
|
| Developer sites restriction |
Developer sites are always private and cannot be set to Public.
|
Reference: Site visibility in Power Pages
Summary
This blog covered why good governance matters for Power Pages and offers simple tips for managing the Microsoft Power Platform.