Environments overview

Environments are a new concept in PowerApps. Put simply, an environment is a space to store, manage, and share your organization’s business data, apps, and flows. They also serve as containers to separate apps that may have different roles, security requirements, or target audiences. How you choose to leverage environments depends on your organization and the apps you are trying to build. For example:

1. You may choose to only build your apps in a single environment.
2. You might create separate environments that group the Test and Production versions of your apps.
3. You might create separate environments that correspond to specific teams or departments in your company, each containing the relevant data and apps for each audience.
4. You might also create separate environments for different global branches of your company.
   

Environment scope

Each environment is created under an Azure AD tenant, and its resources can only be accessed by users within that tenant. An environment is also bound to a geographic location, like the US. When you create an app in an environment, that app is routed to only datacenters in that geographic location. Any items that you create in that environment (including connections, gateways, flows using Microsoft Flow, and more) are also bound to their environment’s location.

Every environment can have zero or one Common Data Service databases, which provides storage for your apps. The ability to create a database for your environment will depend on the license you purchase for PowerApps and your permission within that environment. For more information, see Pricing info.

When you create an app in an environment, that app is only permitted to connect to the data sources that are also deployed in that same environment, including connections, gateways, flows, and Common Data Service databases. For example, let’s consider a scenario where you have created two environments named ‘Test’ and ‘Dev’ and created a Common Data Service database in each of the environments. If you create an app in the ‘Test’ environment, it will only be permitted to connect to the ‘Test’ database, it won't be able to connect to the ‘Dev’ database.

There is also a process to move resources between environments. For more information, see Migrate resources.

Environment permissions

Environments have two built-in roles that provide access to permissions within an environment:

• The Environment Admin role can perform all administrative actions on an environment including the following:

  o Add or remove a user or group from either the Environment Admin or Environment Maker role

  o Provision a Common Data Service database for the environment

  o View and manage all resources created within an environment

  o Set data loss prevention policies. For more information see Data loss prevention policies.

• The Environment Maker role can create resources within an environment including apps, connections, custom connectors, gateways, and flows using Microsoft Flow.

Environment Makers can also distribute the apps they build in an environment to other users in your organization by sharing the app with individual users, security groups, or to all users in the organization. For more information, see Share an app in PowerApps.

Users or groups assigned to these environment roles are not automatically given access to the environment’s database (if it exists) and must be given access separately by a Database owner. For more information, see Configure database security.

Users or security groups can be assigned to either of these two roles by an Environment Admin from the PowerApps admin center. For more information, see Environment Administration.

The default environment

A single default environment is automatically created by PowerApps for each tenant and shared by all users in that tenant. Whenever a new user signs up for PowerApps, they are automatically added to the Maker role of the default environment. The default environment is created in the closest region to the default region of the AAD tenant.

The default environment is named as follows: “{Azure AD tenant name} (default)”

Choosing an environment

With the introduction of environments, you will now see a new experience when you come to https://web.powerapps.com. The apps, connections, and other items that are visible in the site will now be filtered based on the current environment that is selected. Your current environment is specified in the environment picker near the right edge of the header. To choose a different environment, click or tap the picker, and a list of available environments appears. Click or tap the one you wish to enter.

An environment will show up in your picker if you meet one of the following conditions:

1. You are a member of the Environment Admin role for the environment.
2. You are a member of the Environment Maker role for the environment.
3. You are not an Environment Admin or Environment Maker of the environment, but you have been given ‘Contributor’ access to at least one app within the environment. For more information, see share an app. Note: in this case, you will not be able to create apps in this environment. You will only be able to modify the existing apps that have been shared with you.

Creating an environment

Who can create environments?

Your license determines whether you can create environments.

License	Environment creation is allowed
PowerApps P2	√
PowerApps P2 Trial	√
PowerApps P1	x
PowerApps P1 Trial	x
Dynamics 365 Plans	x
Office 365 Plans	x
Dynamics 365 Apps and Teams Plans	x

Each user can create up to five environments.

At present you cannot delete an environment.

Where can environments be created?

You will be able to create new environments from PowerApps.com and from the PowerApps admin center. If you create an environment, they you will automatically be added to the Environment Admin role for that environment. There is not be a limit on the number of environments that you can be participate in as a member of the Environment Admin or Environment Maker role. For more information, see Environment Administration.

What will change for PowerApps Preview users?

Any user that has participated in the PowerApps preview will see some changes in their experience with the introduction of environments. The following table lists what U.S. users and non-U.S. users can expect:

User	What happens
Preview user who created a Common Data Service database	You will see an environment called “{Your name}’s environment” that contains your preview Common Data Service database and any apps that you built against it. You will be added to the Environment Maker role and Environment Admin role of this environment and as a Database owner of the database. When PowerApps enters general availability, we will upgrade the metadata of the Common Data Service. The impact of this change means that you will still be able to use the entities and apps that you have already built against your preview Common Data Service database; however, you won't be able to create fields or entities in that database. We will soon publish guidance on how you can create an environment with a database that contains the upgraded metadata and migrate your apps over to that environment. Note: If any of your apps that were built against your preview Common Data Service database also leverage a custom connector as a data source, they will be temporarily broken in this environment because all custom connectors will be migrated to the default environment. You'll need to re-create the custom connector in this environment to repair any affected apps.
Preview user in the U.S.	The following resources that you created during the PowerApps preview period will be available in your tenant’s default environment: - All apps you created (except any that connected to a preview Common Data Service database) - All connections and custom connectors that you created - All on-premises data gateways you installed
Preview user not in U.S.	In addition to the default environment, you will also see an environment called “{Azure AD tenant} (from preview)” that contains the following resources you created during the PowerApps preview period: - All apps you created (except any that connected to a preview Common Data Service database) - All connections and custom connectors that you created - All on-premises data gateways you installed. You will be added to the Environment Maker role of this environment.

A preview user is someone who used Microsoft PowerApps before its release to General Availability (GA).

Two weeks after PowerApps enters general availability (GA), environments that contain preview content will be marked as read-only (with the exception of the default environment); all existing apps and flows will continue to work in these environments, but you won't be able to create apps or flows. We highly recommend that users of these environments migrate their content to the default environment or another custom environment. Please refer to the following blog (which will be posted this week) for more information about the migration process: see the Common Data Service features announcement blog.

Example environments for a preview user in U.S.

Example environments for a preview user not in U.S.

Managing environments for your organization

With the introduction of environments, we are also launching the PowerApps admin center, where you can manage all of the environments that you have created or to which you have been added to the Environment Admin role. From the Admin center, you can perform all administrative actions on an environment, including the following:

• Add or remove a user or group from either the Environment Admin or Environment Maker role. For more information, see Environment Administration.
• Provision a Common Data Service database for the environment. For more information, see Create a Common Data Service database.
• Set Data Loss Prevention policies. For more information, see Data loss prevention policies.
• Set database security policies (as open or restricted by database roles). For more information, see Configure database security.
• Members of the Azure AD tenant Global administrator role (includes Office 365 Global admins) can also manage all environments that have been created in their tenant and set tenant-wide policies from the PowerApps admin center.