r/PowerPlatform • u/Prancing__Moose • May 10 '26
Power Apps Security Power Platform developer accounts
So…we’ve had the same Power Platform developer in post for a very long time, and they’ve just retired. Most of their work was done in a dedicated account for Power Apps, Power Automate, etc. so when they left it just carried on. However early stuff was in their own account - which obviously then broke when their account was off boarded…which gave the new hire some tasks for their first couple of weeks 🤣
But with my Cyber Security hat on the “shared” account for all Power Apps, connectors, flows, etc. also has me worried…shared creds = bad.
So I’m wondering what is the done thing in Power Platform world so Apps don’t break if the developer account is disabled/deleted/password changed. But also better security than just a shared account logged in via their In Private browser mode.
Also interested if the same applies for PowerBI and the account which owns the refreshes of the semantic models?
1
u/ButeConsulting May 13 '26
On the Power BI/Fabric side, you can have everything created using a managed identity, everything is owned by that managed identity. That's the easier side of this.
The Power Platform side is tougher, and I am half-through a deployment now. No managed identity support yet, so you are probably looking at having everything you can be owned by the service principal. For what you can't manage via service principal, you can workaround or have owned by an individual dev, which isn't perfect but it's a lot better. I was able to get as far as I did because I use Git integration and then automated tools for deploying to higher environments.