Web Page Access Control Rule Configuration

MS CRM Portal Security : Web Page Access Control Rule

To control the accessibility to web page of portal to specific user which has specific Web Role assigned then we configure the Web Page Access Control Rule. It provide visibility to web page link.

Take as example, we want to allow web page to be available anonymously for publicly accessible or restrict the access to user who have specific web roles. 

Using the Web Page Access control role we can also manage the accessibility to child links i.e. a web page can have child links like document, web files etc. accessibility to these links also can be managed by Web Page Access Control Rule.

Web Page Access Control Rule can be configured from below two ways:

• Power App Portal Studio 
• Portal Management App

I will show configuration from Portal Management App.

Create Web Page Access Control Rule : We can go to Web Page Access Control Rule directly from left side navigation or from Web Page - > Related -> Web Page Control Rule.

Click on New to create new Web Page Access Control Rule.

Name: Enter the name of Web Page Access Control Rule.

Website: Select the website for which will be create Web Page Access Control Rule.

Web Page: Select the Web Page which we want to restrict or control.

Right: what type of access we want to provide through this Web Page Access Control Rule. It has two right.

•         Grant Change
•         Restrict Read

Grant Change: It allow users who has web role associated with the rule to publish the content changes for this web page and all child pages of this page. It takes precedence over Restrict Read rule.

Example: We have portal site where we have some pages which can be change by some set of user, but these users should not allow to change other content of the portal. In such cases will create Grant Change Right type Web Page Access Control Rule for the web page where we want to allow user to make change and associate web role to those user.

Grant Change rule should always be present if we want to allow user to make change to portal. 

For the Administrator Web Role since Grant Change right is given to Home Page, so it all child page get access to edit the front - end content when user has Administrator Web Role associated.

Restrict Read: It is restrictive rule and it limit the visibility of content of web page (and its all child pages) to specific users. 

Example: On portal we do want some web page to be accessible for set up users even though they have login to portal. In such case will create Restrict Read right type Web Page Access Control rule and associate the Web Role. The user which has this web role associate will get access to browse the web page and for the user which does not have web role associated then web page will not be accessible.

Access Type: It has two option 

•         All Content
•         Exclude direct child web page

All content means all the child web page will get restrict. If we do not want to restrict child link or web page then select Exclude direct child web page.