Control who can create and manage environments in Power Platform

Article
04/23/2024

With the new provisioning model, those users with the correct licenses can create an environment as long as 1 GB of capacity is available. When you complete the steps in this article to restrict who can create environments, only users who have the following admin security roles can create new environments in the Power Platform admin center:

Global admins
Dynamics 365 admins
Power Platform admins

Control environment creation in the Power Platform admin center

To restrict environment creation and management to admins from the Power Platform admin center, follow these steps:

Sign in to the Microsoft Power Platform admin center at https://admin.powerplatform.microsoft.com, and select Settings on the left navigation pane.
From the Tenant settings list, select from the following environment type creation settings:
- Developer environment assignments
- Production environment assignments
- Trial environment assignments
Select Only specific admins.
Select Save.

Repeat the steps for each environment type that you want to restrict.

Note

Environments created prior to restriction can still be managed after restriction by those who created the environment. Restriction will prevent any new environments being created and managed.

Developer environments

Developer environments are special environments intended only for use by the owner. You can restrict users from creating developer type environments from Power Platform admin center. To restrict users from creating developer type environments, admins can use following PowerShell command:

$requestBody = [pscustomobject]@{
powerPlatform = [pscustomobject]@{
governance = [pscustomobject]@{
disableDeveloperEnvironmentCreationByNonAdminUsers  = $True
}
}
}

Set-TenantSettings -RequestBody $requestBody

More information: Block trial licenses commands.

Control environment creation through PowerShell

Download and install the admin PowerShell cmdlets as described here. For more information about our cmdlets, see PowerShell support for Power Apps.

Use the following commands to restrict environment creation to Global admins, Dynamics 365 admins, and Power Platform admins.

$settings = @{ DisableEnvironmentCreationByNonAdminUsers = $true }
Set-TenantSettings $settings

FAQ

Can I disable trial environment creation for users in the tenant?

Yes. You can follow the steps in this article to control environment creation in the Power Platform admin center or use the following PowerShell commands to restrict trial environment creation.

$settings = @{ DisableTrialEnvironmentCreationByNonAdminUsers = $true }
Set-TenantSettings $settings