Microsoft Power Platform · Tenant Administration

Power Apps Administrator

Tenant-wide administration of Power Apps. Lower-privilege alternative to Power Platform Administrator for organisations only using Power Apps. Cross-listed from Microsoft Entra ID.

Scope: Tenant-wide Power Apps administration

Permissions

  • Environments - Manage Power Apps environments
  • Apps - View and govern apps across the tenant
  • Flows - View and govern Power Automate flows
  • Admin center - Access Power Platform admin center for Power Apps scope

Common use cases

  • Power Apps-only organisations
  • Delegated admin for the Power Apps footprint when D365 is admin-managed separately

Best practices

  • Use only when the org is Power-Apps-only and does NOT use Dynamics 365 or broader Power Platform features
  • For most orgs, prefer Power Platform Administrator — narrower roles fragment governance
  • Pair with the Power Platform CoE Kit for visibility

Security considerations

  • Can view all apps and flows tenant-wide
  • Does NOT govern DLP policies tenant-wide — use Power Platform Administrator for tenant DLP
  • Cannot manage Dataverse capacity or AI Builder credits

Official Microsoft Learn documentation →

Open the interactive RBACMap →