Introduction to Power Apps & Flow for Administrators

An overview of Power Apps & Flow settings — How these are acquired, managed & administered?


Power Apps and Flow ​resources are contained inside a virtual space called Environments. An Environment is a container that act as the boundary for security, data location, resource usage etc. A Default environment is created automatically and tenant admins can create more environments but would need a Power Apps P2 license.

Image from Ignite session BRK2305

Usage & licensing

Power Apps & Flow are licensed on per-user basis and are available to end users in many ways outlined below. Note: A Power Apps license include the corresponding Flow license e.g. If customer purchase P1 license of Power Apps then they also get P1 license for Flow. On the other hand, Flow licenses can be purchased separately without including Power Apps.

  • Flow Free: Individual users can simply browse to, use their O365 identity and start using the free version
  • Power Apps Community: A free environment for individual usage
  • Subscriptions: Get Power Apps & Flow as part of Office 365 subscription e.g. E3 license
  • Standalone plans: Admins can purchase P1 or P2 standalone plans and assign to users

Protect business data

Power Apps & Flow allow users to connect to business data (Office 365 apps — SharePoint, Exchange, Skype, OneDrive) and non-business data (Twitter, Drop box etc.). An example is of a Flow that posts something to a user’s Twitter feed based on an email user receive on their company email address.

Data Loss Prevention (DLP) policies are a way to draw a line between business data & non-business data. E.g. a DLP policy, groups apps connectors in two categories — Business apps and non-business apps and prevents users from creating Power Apps or Flows that share data between the apps in these two groups i.e. If SharePoint is categorized as business app and Twitter as non-business app then users can’t create a Flow that connects SharePoint & Twitter.

A DLP policy applies to both Power Apps & Flow.

DLP policy isolate business data connectors from non-business data

Admin center

Both Power Apps and Flow admin center share settings and changes made in one are visible in another e.g. if you create a DLP policy in Flow admin center then it’s applicable to Power Apps too. This can be understood from the fact that both Power Apps and Flow resources are enclosed inside the same Default Environment.



Popular posts from this blog

SharePoint 2013 Search Service Activation Error

VMWare Workstation - Assign a static IP address

SharePoint 2013 Intranet, Extranet & Internet architecture