Home > Microsoft > Configure Scan Profiles > Create Scan Profiles for Power Platform
Export to PDFTo create a scan profile, refer to the following steps:
Choose object types – In the Tenant drop-down list, select a tenant for which the scan profile is created. Then, select the object types to be included in a scan profile for Power Platform.
The table below lists the services and apps which can scan Power Platform objects:
| Service | App type | Scan object types | Required license/role |
|---|---|---|---|
| Cloud Backup for Microsoft 365 | delegated app | Power App, Power Automate, and Power BI | The Power Platform Administrator role must be assigned to the consent user of the app profiles for scanning Environments, Connections, Power Apps, Solutions, Power Automate, or Power Pages objects.The Power BI license and Fabric Administrator role must be assigned to the consent user of the app profiles for scanning Power BI objects. |
| Cloud Governance | Cloud Governance for Power Platform | Environment, Power App, Power Automate, and Power BI | The Power Platform Administrator role must be assigned to the consent user of the app profiles for scanning Environments, Connections, Power Apps, Solutions, Power Automate, or Power Pages objects.The Power BI license and Fabric Administrator role must be assigned to the consent user of the app profiles for scanning Power BI objects. |
| Cloud Governance | custom app with delegated permissions | Environment, Power App, Power Automate, and Power BI | The Power Platform Administrator role must be assigned to the consent user of the app profiles for scanning Environments, Connections, Power Apps, Solutions, Power Automate, or Power Pages objects.The Power BI license and Fabric Administrator role must be assigned to the consent user of the app profiles for scanning Power BI objects. |
| EnPower | EnPower for Power Platform | Environment, Connection, Power App, Power Automate, Power BI, Solution, and Power Pages | The Power Platform Administrator role must be assigned to the consent user of the app profiles for scanning Environments, Connections, Power Apps, Solutions, Power Automate, or Power Pages objects.The Power BI license and Fabric Administrator role must be assigned to the consent user of the app profiles for scanning Power BI objects. |
| EnPower | custom app with delegated permissions | Environment, Connection, Power App, Power Automate, Power BI, Solution, and Power Pages | The Power Platform Administrator role must be assigned to the consent user of the app profiles for scanning Environments, Connections, Power Apps, Solutions, Power Automate, or Power Pages objects.The Power BI license and Fabric Administrator role must be assigned to the consent user of the app profiles for scanning Power BI objects. |
| Fly | Fly for Power Platform | Environment, Power App, and Power Automate | The Power Platform Administrator role must be assigned to the consent user of the app profiles for scanning Environments, Connections, Power Apps, Solutions, Power Automate, or Power Pages objects.The Power BI license and Fabric Administrator role must be assigned to the consent user of the app profiles for scanning Power BI objects. |
| Insights | Insights for Power Platform | Power BI | The Power Platform Administrator role must be assigned to the consent user of the app profiles for scanning Environments, Connections, Power Apps, Solutions, Power Automate, or Power Pages objects.The Power BI license and Fabric Administrator role must be assigned to the consent user of the app profiles for scanning Power BI objects. |
2. Profile settings – Refer to the information below to configure the profile settings:
3. Configure containers and rules – Refer to the information below to choose a scan mode:
4. Have an overview of the settings in the scan profile, and take one of the following actions: