blog.atwork.at

news and know-how about microsoft, technology, cloud and more.

Tips for PowerApps-(When) does a user need a license?

PowerApps is licensed in the Office 365 environment and offers three license plans: PowerApps for Office 365 and Dynamics 365, PowerApps Plan 1 and PowerApps Plan 2. Since it often is not clear, if end users who want to use (and not create) a PowerApps app need a license or how licensing works with data sources, I want to inform about licenses, show some samples and clarify that topic here.

License plans

First, let's have a look at the license plans. powerapps.microsoft.com/pricing informs about the three different license plans which are available since November 2016. For Flow, see flow.microsoft.com/pricing.

SNAGHTMLffb3a7e

PowerApps licenses at a glance

So, I summarized the top key facts for licensing of PowerApps:

  • Trial: A trial lasts for 90 days.
  • PowerApps and Flow can be used only within the Office 365 tenant - this means in your own organization:
  • Every user needs to login with his (company's) Office 365 credentials. No company login, no access.
  • Every user who wants to use a PowerApps app, needs a license. (This answers the title question...)
  • These Office 365 SKU's include "PowerApps for Office 365":
    • Office 365 Business Essentials
    • Office 365 Business Premium
    • Office 365 Enterprise E1, E3 and E5
  • These Dynamics 365 SKU's include "PowerApps for Dynamics 365":
    • Dynamics 365 for Sales, Enterprise edition
    • Dynamics 365 for Customer Service, Enterprise edition
    • Dynamics 365 for Operations, Enterprise edition
    • Dynamics 365 for Field Service, Enterprise edition
    • Dynamics 365 for Project Service Automation, Enterprise edition
    • Dynamics 365 for Team Members, Enterprise edition
    • Dynamics 365 for Financials, Business edition
    • Dynamics 365 for Team Members, Business edition
  • PowerApps Plan 2 is included in: Dynamics 365, Enterprise edition, Plan 1 and Dynamics 365, Enterprise edition, Plan 2
  • You can mix PowerApps licenses within your organization as needed.
  • Data source defines the license: If a PowerApps app is only accessing data stored in Office 365 (and a cloud service that is covered with a standard connector), the Office 365 licenses they already have cover both creation and usage of this app. Otherwise, for example, if the Common Data Service (CDS) is used as data source, all users need PowerApps Plan 1. See more details here.
  • Storage or limits: Sometimes it comes to resources or quotas: To clarify: Resource capacity (data storage, file storage, and flow runs) is included with each license. If a tenant's capacity is exhausted, customers may purchase additional capacity through add-on licenses. See more details here.

What happens with a user without licenses?

To show this in real word, I have documented the scenario of a user accessing a PowerApps app without any license here.

image

...

image

So, the new user was created.

image

This user does not have any Office 365 license. He just can sign in.

Try it

So, let's open a browser in Private mode and try https://powerapps.microsoft.com/.

image

Sign in with the new user.

image

Now, there comes the interesting part: John does not have a PowerApps license.

PowerApps welcomes us with two options: "Cancel" or "Start my trial".

To clarify, this means, we will not get access to PowerApps without a license.
Every user of a PowerApp needs a license (whether he just want to use an app or if he wants to create a new app).

So, the minimum license plan a user needs is "PowerApps for Office 365 and Dynamics 365".

Don't use PA - or use a trial

If you like, use "trial". As mentioned above, this trial lasts for 90 days.

image

With the trial, John now can also create new PowerApps or consume existing ones.

image

The user gets the full PA experience as with a license.

If a user is running a trial, the Office 365 administrator can assign him a "real" license anytime.

Need a license for the data source as well

So, John has a PowerApps trial license now (but still no other license). When accessing a company app, we get interesting effects, which might not be clear for all readers. So I also wanted to document this scenario (and in general the behavior when working with PowerApps and data sources).

I am using the mobile PowerApps app on my phone for the test, logged in as John. Although I can see the apps, as the "Fahrtenbuch" app (see here), I need to sign in to access the data sources - in that case SharePoint Online and Office 365 Users. Ok, so Sign in, Connect for each data source, until it's done and then Allow.

20170105_103417000_iOS 20170105_103443000_iOS 20170105_103455000_iOS 20170105_103508000_iOS 20170105_103518000_iOS

So far so good. Now the app continues and ...

20170105_103525000_iOS 20170105_103613000_iOS

...the user does not get access to the data source. He cannot use the app with SPO as data source.

That's understandable and shows, that a license is needed for the Office 365 resources as well (or any cloud service that is covered with a standard connector). John could sign in, but he does not have a license for accessing SharePoint Online. So he does not get access to the data source.

It would be a different story, if the organization writes it's own data source (a Web API with the CRUD operations and a swagger document) without any Office 365 data services. Then there's just the PowerApps license required (as we have currently with the trial for John).

Test it with license for PA and the data source

Just - to proof that - the other way around: When checking the licenses of John, we see, that the PA trial is not visible. The user still has no PA license. Secondly, I assign just the SPO (Plan 2) license to that user.

image

It took about 1 to 2 minutes until my PowerApps app on the mobile client showed my apps again. When running the "Fahrtenbuch" app, I got the same experience as above: "You don't have permissions to access this app.". Well, ok, now John has a license.

But, he does not have permissions to the SharePoint list!

Usually in SPO, permissions are inherited. So I simply assigned John as member of the underlying SPO site (where the list is stored).

image

Ok, next try. Going back to my mobile device, creating a new record and tapping the refresh button in the list. Now it works like a charm.

20170105_140102000_iOS 20170105_140114000_iOS

Now John is able to use the PowerApps app. Reading the (second data source) Office 365 users works as well with the account of John.

What we see in this sample as well, is that there is no impersonation of users working with a PowerApps app and an Office 365 data source. The PA client is accessing the data source with the credentials (the user object or the token) of the logged in user. In our case John needs to have permissions to the SPO list.

Summary

I hope this short summarization makes it clear how licensing for PowerApps works and what it means in real world.

Happy developing PowerApps!

Comments (5) -

  • Amit Lohogaonkar

    1/26/2017 11:13:58 PM |

    1. PowerApps and Flow can be used only within the Office 365 tenant – this means in your own organization:
    2. Every user needs to login with his (company’s) Office 365 credentials. No company login, no access.
    ---I am little confused on above 2 because when I talked to MS support person he said you can create standalone powerapp plan(need to have a domain- for example when you buy standalone powerapp plan p2 it does not verify whether company or office 365 exists, it simply needs some domain for example p2user1@projecta.onmicrosoft.com
    Now once you buy 40$ p2 plan with p2user1@projecta.onmicrosoft.com you can add as many p1 users(7$) per users as you want(no office 365) and then give any user username and password to login. The only caveat is sendemail in flow which can be resolved by using "mail" action that uses sendgrid(its free). I bought a sample p2 plan and it does not mention any of above 2 points and I verified with MS support as well, Even you can try it! you do not need to have it only when you are in your @atwork domain. You can create tonyuser@tonysite.onmicrosoft.com

  • Michael Petersson

    5/8/2017 10:41:18 AM |

    I have a customer with an O365 E3 plan (licensed for all users in the company). The plan is now to build a workflow solution based on E3 components (SPO, Team Flow, Power Apps, Groups etc.). Actors in the solution will both come from the "E3-licensensed company" and from external parterns (these will be invited as external users). An external user may or may not have an O365 prescens/licenseses. Can all acttors (internal/external) participate in the workflow app at the same conditions? Or , do the we ("the company with the E3-licenses") purchase O365/E3 licesenses for all externals as well?

  • megan collins

    11/21/2020 9:52:19 AM |

    Our knowledge is truly enhanced after reading this. It was quite useful. we are truly glad that you shared this with us. Here is a referred blog that I have found same as yours   <a href="smconsultant.com/.../"; rel="dofollow">oracle fusion financials training</a>. while browsing, i came across this one, it's useful and will be providing necessary knowledge too.

  • turk

    12/22/2020 10:54:49 AM |

    I wish to show thanks to you just for bailing me out of this particular trouble. As a result of checking through the net and meeting techniques that were not productive, Same as your blog I found another one <a href="smconsultant.com/.../"; rel="dofollow">Oracle Fusion Financials </a>.Actually I was looking for the same information on internet for <a href="smconsultant.com/.../"; rel="dofollow">Oracle Fusion Financials</a> and came across your blog.  I am impressed by the information that you have on this blog.  Thanks once more for all the details.

  • Peter G McDermott

    3/19/2021 11:19:32 AM |

    Thank you so much for this breakdown. It's a very helpful cautionary tale for knowledge workers looking to digitalize processes with mixed audiences. In my case, I'm working on a solution that would provide a simple tool to both corporate and franchise users. Because the franchise users are not required to have O365 licenses, despite having SSO, it looks like Power apps would not be a viable solution for these use cases.

Loading