> For the complete documentation index, see [llms.txt](https://dyns.ntd.asia/power-dynamics/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://dyns.ntd.asia/power-dynamics/power-platform/model-driven-app/tip-create-a-security-role-with-app-opener-minimum-privileges.md).

# Tip: Create a Security Role with "App Opener" minimum privileges

Hello, my friends,

I recently conducted a training session on the **"Security Role model"** within Dataverse. During the session, I utilized the modern interface of the Power Platform Admin Center to create a new Security Role. I discovered a new option *<mark style="color:green;">**"**</mark>*:ballot\_box\_with\_check: *<mark style="color:green;">**Include App Opener privileges for running Model-Driven apps".**</mark>*

<figure><img src="/files/WK29kqRmmAeyf33FEaq4" alt="" width="563"><figcaption><p>New Option: Include App Opener privileges for running Model-Driven apps</p></figcaption></figure>

Once created, the Security Role will be automatically configured with all the essential permissions to operate Model-driven applications efficiently.

{% hint style="info" %}
For further: [Minimum privileges for common tasks](https://learn.microsoft.com/en-us/power-platform/admin/create-edit-security-role#minimum-privileges-for-common-tasks) in Model-Driven App.
{% endhint %}

Previously, I preferred the legacy interface for creating a new Security Role or customizing the application. This preference led me to switch to the legacy interface to check... and **HAVE NO** this option.

<figure><img src="/files/6VcEjGcQsi349dHfb7mt" alt="" width="563"><figcaption><p>The Legacy Interface - Create a Security Role</p></figcaption></figure>

Okay... for now, checking my new Security Role with the option: ***Include App Opener privileges for running Model-Driven apps.*** \
-> By selecting this option, this security role has been granted a wide range of permissions. This ensures the user will have seamless access to the Model-driven application with their new security role as below.

<figure><img src="/files/swlFBy4izidupj0YoaOK" alt=""><figcaption><p>The new Security Role - Included "App Opener" privileges</p></figcaption></figure>

Without this option, once created, the new Security Role is almost empty permission configuration as below.

<figure><img src="/files/A0GHm4AD5FSf1QHZJVqu" alt=""><figcaption><p>The new Security Role - Excluded "App Opener" privileges</p></figcaption></figure>

Thank you for reading and hoping well. :tada:\
\&#xNAN;**\[NTD]yns.Asia**\ <mark style="color:red;">...</mark>[<mark style="color:red;">invite me a cup.</mark>](https://ko-fi.com/ntdyns/?ref=qr\&amp;v=2) :coffee: Thank you. :heart:
