Forum Discussion
Kerem Yuceturk
Microsoft
Oct 27, 2017PowerApps and Flow buttons are graduating out of preview!
PowerApps and Flow are becoming a more integral part of SharePoint Online with the imminent release of Custom Forms with PowerApps and the Flow Launch Panel. Starting in November, these features will...
Kerem Yuceturk
Microsoft
Nov 02, 2017Hi Pontus T, we are starting to take big dependencies on Flow and PowerApps: Custom Forms in the PowerApps case, and out of box review/approval flows for lists and libraries on the Flow side. So having these features off is not something we want to encourage to keep the product consistent for our users.
We do appreciate the feedback, and will be watching the discussion under the user voice item to be sure.
Rob Bowman
Nov 06, 2017Iron Contributor
Kerem, based on your statements that PowerApps and Flow are still catching up with meeting all regulatory and security features, dependent or not to the future of SharePoint, the decision to release to a company should be based on the Admins and companies decision, not Microsoft. Some of us are keeping SharePoint on Premise around for just this reason. The decision to "Push" companies keeps our team (a highly regulated Global Financial Firm) continuously explaining situations that we should not have to.
- Kerem YuceturkNov 07, 2017
Microsoft
Thank you all very much for the thoughtful feedback you have provided. I wanted to clarify a few things.
When we first added the PowerApps and Flow buttons to modern lists back in the second half of 2016, these products were still in preview. They have since moved to general availability and completed their certification processes earlier this year to certify that they are in compliance with the standards expected from workloads in Office 365. Microsoft Trust Center has detailed information about the current level of compliance for PowerApps and Flow. We would not be removing them from under the preview features switch if this were not the case. You should not have anything to worry about on the compliance front. We actually have a few customers who have been asking for this change knowing that PowerApps and Flow are now within the compliance boundary. The only exception to this is government cloud and sovereign cloud instances in Germany and China, where the buttons will remain off while PowerApps and Flow work on adding support for these environments.
Features like “Custom forms using PowerApps”, “Flow launch panel” and “Out of box review/approval flow” are set to become major features for SharePoint Online. We hear our customers desire to be able to control each new feature of SharePoint and turn it on or off on your own terms, but the permutations of different features and their interactions with each other makes the maintainability and support of our product prohibitively difficult, and moves us away from viewing SharePoint as a coherent whole, rather than a collection of independent features. So we want to avoid providing a switch for each feature even though this does provide our customers with peace of mind. We are trying to make new features as easy to learn as possible and to provide in box tutorials and guides where it makes sense to help end users succeed, and to also reduce the burden on you for creating comprehensive documentation and training. We acknowledge that we have more work to do here but our designer and UX writers are spending more effort here.
PowerApps and Flow both have admin centers that allow O365 admins to go in and see all of the apps and flows in the tenant, as well as take them over as needed when users leave an organization, or under other circumstances. They also allow you to set policies to prevent mixing SharePoint data with other connectors if you need to do that, and let admins download the list of active users who use these tools in their organizations. We also just announced that activities from Flow are also available in the O365 security and compliance center: https://flow.microsoft.com/en-us/blog/security-and-compliance-center/.
I also wanted to iterate that Flow and PowerApps always run in the context of a user, and they don't allow users to do anything that was beyond their reach previously. Savvy users today can use other third party automation solutions, or create code that will do the things that Flow and PowerApps can help them do without the data controls that Flow and PowerApps allow. It's true that under the trial licenses users can try out different features of Flow and PowerApps such as creating their own environments, but they would not be able to access other environments (including the default environment) like tenant administrators can, and their environments will expire after the trial period.
The presence of Flow and PowerApps licenses for users is not checked by SharePoint UI. So the buttons will be visible regardless of the state of licenses for a given user.
We want to find a healthy balance between helping you control your data, and providing your end users tools they can use to get work done without having to resort to non-compliant tools. We still think graduating these features out of preview is the correct thing to do here.
Our plan remains to start rolling this change out to First Release tenants by November 13, and then to Production tenants in two waves on November 27, and December 4th.
- Tami ShawNov 16, 2017Brass Contributor
Thanks for your response Kerem Yuceturk. What's the plan on dealing with Global companies that have employee's in Germany and China since we can't turn the license off?
Thanks,
Tami
- Kerem YuceturkNov 17, 2017
Microsoft
Hi Tami Shaw, the data sovereignty guarantees only apply to tenants who are housed in those sovereign environments. When you have a tenant that's not in one of the sovereign environments, your users, including those in China or Germany, will use the same data centers that the rest of your users will use, depending on the country picked while creating your Office 365 tenancy. This is true for any Office 365 workload like Exchange and SharePoint, as well as for PowerApps and Flow. So this should not be a new concern for you.
- Shobhit AcharyaNov 09, 2017Brass ContributorThis is absolutely unacceptable for many large tenants including mine. New features are welcome, but this isnt about the features or buttons. Its the ability to control access to an apps that arent ready for prime time. Powerapps isnt even integrated in SP as a form solution yet, flows are still bound by personal execution limits. Microsoft is repeating the same mistakes all over again despite of assurances of not forcing new applications that cant be controlled before adoption. As a member of the CAB forum and ill make sure it gets escalated there as well
Problems:
1-Azure AD Conditional access cant target these apps for blocking unautorized access.
2- Signup via unlicensed Trial subscriptions cant be stopped to these apps. The trials it seems can even be extended after expiry.
3- Anyone - even unlicensed can create Powerapps and publish to the whole org creating clutter and confusion.
A solution to either of these 3 problems can grant some degree of control over all this and it seems MS is chosing not to resolve them.- Kerem YuceturkNov 10, 2017
Microsoft
Hi Shobhit Acharya, we would love to understand the problems you mention below better. Some comments:
- Custom Forms with PowerApps is going out to First Release tenants next week, same time as this change. This is one of the reasons we don't want to have a way for turning these buttons off.
- Flow does not impose a personal execution limit. It's always a tenant wide pool based on how many users are in the tenant, and it is shared across users.
- Flow and PowerApps both support AAD conditional access, 2 factor auth, etc. Is that what you are looking for here?
- Trial users can create environments to test out, but can't make these environments be the default environment and "pollute" the environment that vast majority of the users will see. The tenant admins have a way to control who can publish apps in the default environment.
Happy to set up some time to talk about the issues to understand it in more detail, but they should be addressable with what we have today.