Microsoft is introducing Enhanced Authorization for Power Pages, moving external-user authorization natively into Dataverse. The update maps Power Pages concepts — contacts, web roles, and table permissions — to Dataverse-native constructs: system users, security roles, and record-filter-based privileges. At runtime, Power Pages impersonates a mapped Dataverse system user, letting Dataverse enforce access directly at the data layer rather than reconstructing permissions in the middle tier. A new Custom Scope using FetchXML filters enables granular, record-level access control beyond existing relationship-based scopes. The change also improves auditing by associating actions with the specific mapped external user, and enables Dataverse column security to work seamlessly in Power Pages. Makers opt in to migrate existing configurations; the familiar Power Pages design experience remains unchanged.
