Set up a custom security role by copying a default role
Custom security roles allow organisations to tailor access beyond the default roles provided by Altus and Dataverse.
They are typically used when:
- Default roles do not fully meet governance requirements
- More granular control is required across functional areas
For more information on Altus security configuration, refer to:
https://docs.altus.pro/products/AltusPPM/Configuration/Security/index.html
Important: Platform & Permissions
Custom roles are not configured within Altus UI.
They are managed in:
- Power Platform Admin Centre
- Dataverse security settings
These tasks typically require:
- System Administrator-level access
Recommended Approach
Custom roles should always be created by:
- Copying an existing security role
- Modifying permissions to suit requirements
This ensures:
- Required base permissions are preserved
- Configuration is faster and more reliable
High-Level Steps
- Navigate to Power Platform Admin Centre
- Select the relevant environment
- Go to:
- Settings → Users + Permissions → Security Roles
- Select an existing role
- Choose Copy Role
- Enter a new role name
- Update permissions and access levels
- Save and assign the role to users or teams
👉 For detailed Microsoft step-by-step instructions, refer to:
https://learn.microsoft.com/en-us/power-platform/admin/copy-security-role
How Security Roles Work
Security roles define:
- Privileges (e.g. Create, Read, Update, Delete, Assign, Share)
- Scope (User, Business Unit, or Organisation level)
Users can have multiple roles, and permissions are cumulative. [learn.microsoft.com]
How This Impacts Altus
Custom roles control:
Access to:
- Projects and work entities
- Financial data and reporting
- Configuration and administrative features
Ability to:
- Create, edit, approve, or manage records
- Perform administrative or governance functions
They are key to:
- Enforcing governance models
- Meeting compliance requirements
- Supporting different user personas
Additional Reference
For detailed Microsoft guidance on assigning and managing security roles, refer to:
https://learn.microsoft.com/en-us/power-platform/admin/assign-security-roles
Key Considerations
- Always base new roles on existing roles (do not start from scratch)
- Do not modify default roles directly
- Follow the least privilege principle
- Test roles before assigning broadly
- Periodically review and maintain role configurations