Others

How to Restrict Power Platform Access When Capacity Is Full

Bushra Parveen Oct 22, 2026 868 views

Question details

The user wants to monitor Microsoft Power Platform storage capacity using PowerShell and automatically limit user activities or create a view-only state when a predefined storage threshold is exceeded.

How to Restrict Power Platform Access When Capacity Is Full

Product: Microsoft Power Platform
Device & OS: not provided
Scenario: Administrators need to enforce data limits by restricting makers and users from consuming further storage space once the environment capacity is full.
Observed behavior: The standard PowerShell revocation command entirely removes user permissions instead of creating a true read-only state, meaning users cannot view the environment to free up space.

Before you start

Ensure you have Power Platform Administrator privileges and run an elevated PowerShell session (Run as Administrator) to install the necessary modules.

Solution 1Recommended

Monitor Capacity and Revoke Access using PowerShell

Use Power Apps PowerShell modules to automate capacity checks and revoke environment access when a threshold is breached.

While PowerShell provides a way to automatically revoke access when a certain capacity limit is met, be aware that the Revoke-AdminPowerAppEnvironmentAccess command will remove permissions entirely rather than setting a 'view-only' mode.

Install required PowerShell modules

Open an elevated PowerShell prompt and execute: Install-Module -Name Microsoft.PowerApps.Administration.PowerShell followed by Install-Module -Name Microsoft.PowerApps.PowerShell -AllowClobber to ensure you have the required administrative commands.

Connect to your Power Platform environment

Define your environment variable and connect by running the Connect-PowerPlatform -EnvironmentName "YourEnvironmentName" command.

Retrieve capacity and revoke access

Use the Get-AdminPowerAppCapacity command to fetch the current capacity. If the usage exceeds your defined limit, run Revoke-AdminPowerAppEnvironmentAccess -EnvironmentName "YourEnvironmentName" -UserPrincipalName "*" to block access.

Monitor Capacity and Revoke Access using PowerShell

Read-Only State Limitations: This script removes access for all specified users entirely. To create a true read-only state for makers or databases, you must use Environment Security Groups or Microsoft governance controls instead of this direct revocation command.

Solution 2

Use Environment Security Groups for True Read-Only Access

Manage user permissions through Entra ID (Azure AD) security groups to restrict specific activities without completely locking users out.

Free Microsoft Office alternative

Need a seamless alternative to manage your capacity reports? Try WPS Office

While Microsoft Power Platform handles enterprise app development and automation, WPS Office is the perfect lightweight companion for handling data reports, exported capacity spreadsheets, and daily administrative documentation. It provides a familiar interface and comprehensive document management completely free of charge.

100% compatible with Microsoft Excel, Word, and PowerPoint formats.Lightweight installation with blazing-fast performance on any device.Familiar user interface makes transitioning seamless with zero learning curve.Built-in PDF editing tools for comprehensive IT documentation management.

microsoft office alternative - wps office

Frequently Asked Questions

Can I make a Power Platform environment view-only using PowerShell?

Currently, the standard Revoke-AdminPowerAppEnvironmentAccess PowerShell command entirely removes access. A true read-only state requires manually adjusting Environment Security Groups or relying on specific Microsoft governance features.

Which PowerShell modules are required for Power Platform capacity management?

You need to install two primary modules from an elevated PowerShell prompt: Microsoft.PowerApps.Administration.PowerShell and Microsoft.PowerApps.PowerShell.

How do users regain access after space is freed up in Power Platform?

If access was revoked via PowerShell, administrators must manually re-grant the appropriate roles or add users back to the designated security group once storage capacity falls below the required threshold.

Office Quick Solutions