PowerApps Impersonation

Tracking since May 13, 2026.

Changelog

• Jun 1, 2026
  description

  Test apps and data as any user in your organization — without switching accounts or changing security roles.
  
  Search for any Dataverse user by name or email, click to impersonate, and the extension injects the standard CallerObjectId header into all API requests for that tab. Row-level security, field permissions, and business rules all reflect the selected user's access. One click to stop.
  
  REQUIREMENTS
  - Dynamics 365 / Dataverse account with the Act on Behalf of Another User privilege
  
  FEATURES
  - Search users by name or email
  - Per-tab — other tabs are unaffected
  - Icon badge shows the active impersonated user
  - No credentials stored — uses your existing browser session
  - All data stays within your organization's environment

  Test canvas apps, model-driven apps (MDA), and Dataverse as any user in your organization — without switching accounts or changing security roles.
  
  Search for any Dataverse user by name or email, click to impersonate, and the extension injects the standard CallerObjectId header into all API requests for that tab. Row-level security, field permissions, and business rules all reflect the selected user's access. One click to stop.
  
  REQUIREMENTS
  - Dynamics 365 / Dataverse account with the Act on Behalf of Another User privilege
  
  FEATURES
  - Works in canvas apps (apps.powerapps.com) and model-driven apps (*.dynamics.com)
  - Search users by name or email
  - Per-tab — other tabs are unaffected
  - Icon badge shows the active impersonated user
  - No credentials stored — uses your existing browser session
  - All data stays within your organization's environment

Permissions & access

Permissions

webRequestdeclarativeNetRequestWithHostAccessstoragetabs

Host access

*://apps.powerapps.com/*, *://*.dynamics.com/*

Screenshots