Invitation Maker App

  • Make stunning YouTube intros for your channel with a super simple Online YouTube Intro Creator that comes bundled with 100+ customizable intro templates.
  • Open Canva Open Canva on your desktop or launch the app to get started. Log in or sign up with your Facebook or Google account then search for “wedding invitation” to start designing.
  1. Invitation Maker App
  2. Invitation Maker App Printable

This invite maker app lets you design different cards placed in the app waiting for you to begin using your editing skills. Grab the attention of people through our Birthday Party invitation card.

-->

Canvas apps can be shared with guest users of an Azure Active Directory (Azure AD) tenant. This enables inviting external business partners, contractors, and third parties to run your company's canvas apps.

Prerequisites

  • In Azure AD, enable B2B external collaboration for the tenant. More information: Enable B2B external collaboration and manage who can invite guests

    Note

    B2B external collaboration is enabled by default; however, you need to verify that the settings weren't changed by a tenant admin. For more information about Azure AD B2B, go to What is guest user access in Azure AD B2B?.

  • Access to an account that can add guest users to an Azure AD tenant. Admins and users with the Guest Inviter role can add guests to a tenant.

  • The guest user must have a license with Power Apps use rights that matches the capability of the app assigned through one of the following tenants:

    • The tenant hosting the app being shared
    • The home tenant of the guest user

Steps to grant guest access

  1. In Azure AD, select New guest user. More information: Quickstart: Add a new guest user in Azure AD

  2. If the guest user doesn't already have a license in their home tenant, assign a license to the guest user.

    • To assign guest users from admin.microsoft.com, go to Assign licenses to one user.

    • To assign guest users from portal.azure.com, go to Assign or remove licenses.

    Important

    You might need to disable the Microsoft 365 admin center preview to assign a license to a guest.

  3. Share the canvas app by doing the following:

    1. Sign in to Power Apps.

    2. On the left pane, select Apps.

    3. Select a canvas app.

    4. On the command bar, select Share.

    5. Enter an email address for a guest user from an Azure AD tenant. More information: What is guest user access in Azure AD B2B?

After you share an app for guest access, guests can discover and access apps shared with them from the email sent to them as part of sharing. You can also share the app URL directly with the guest instead. To find the URL, go to Power Apps, select Apps on left pane, select the app, and then select the Details tab. The app URL is displayed under Web link.

Considerations and limitations for guest access

  • Guests can only be assigned the User role, and not the Co-owner role, for apps shared with them.
  • Power Apps guest access uses Azure B2B.
  • Power Apps recognizes guests in states 1 through 4—as outlined in the Azure B2B documentation—when the guest uses a web browser.
  • Power Apps recognizes guests in states 1, 3, and 4—as outlined in the Azure B2B documentation—when the guest uses Power Apps Mobile. More information: Sign in using Power Apps Mobile
  • Power Apps can't recognize guests that authenticate by using Azure AD direct federation or email one-time passcode authentication.
  • Power Apps per app plans are scoped to apps in a specific environment, so they can't be recognized across tenants.
  • Power Apps included with Office and Power Apps per user plans have the following characteristics:
    • In the Azure public cloud, they're recognized across tenants in guest scenarios because they aren't bound to a specific environment.
    • In Azure national or sovereign clouds, they aren't recognized across tenants in guest scenarios. More information: National clouds, Azure geographies
App

Frequently asked questions

What's the difference between canvas app guest access and Power Apps portals?

With canvas apps, you can build an app that's tailored to digitizing business processes, without writing code in a traditional programming language such as C#. Guest access for canvas apps enables teams of individuals made up of different organizations participating in a common business process to access the same app resources that might be integrated with a wide variety of Microsoft and third-party sources. More information: Overview of canvas-app connectors for Power Apps

Power Apps portals provide you the ability to build low-code, responsive websites that allow external users to interact with the data stored in Dataverse. With Power Apps portals, organizations can create websites that can be shared with users external to their organization either anonymously or through the sign-in provider of their choice, such as LinkedIn, Microsoft account, or other commercial sign-in provider.

The following table outlines a few core capability differences between Power Apps portals and canvas apps.

Guest access inInterfaceAuthenticationAccessible data sources
Power Apps portalsBrowser-only experienceAllows anonymous and authenticated accessDataverse
Canvas appsBrowser and mobile appsRequires authentication via Azure ADAny of approximately 150 out-of-the-box connectors and any custom connector

Can guests access customized forms in SharePoint?

Yes. Any user who can access a SharePoint list with a customized form can create and edit items in the list by using the form. As long as the custom form only uses standard connectors, the guest isn't required to have any Power Apps license.

Why is a guest who accesses a customized form in SharePoint prompted for a trial?

If the custom form uses a premium connector, a guest must have a Power Apps license to access the custom form. If the custom form only uses standard connectors, your tenant must allow Microsoft Power Platform internal consent plans to be assigned to users. For more details about Power Platform internal consent plans, read block trial license commands.

Can guests access apps embedded in SharePoint?

Yes. However, access to canvas standalone apps requires that the user have a license with Power Apps user rights that matches the capability of the app; this includes embedded apps. When embedding a canvas app in SharePoint by using the Power Apps embed control, enter the app ID. To do this, enter the app ID in the App web link or ID box.

When embedding a canvas app in SharePoint via the iFrame HTML tag, reference the app by using the full web URL. To find the URL, sign in to Power Apps, select an app, and then select the Details tab. The URL is displayed under Web link.

How is it that guests can open the app shared with them, but no data connections are created?

As is the case with non-guests, the underlying data sources accessed by the app must also be made accessible to the guest.

What license must be assigned to my guest so they can run an app shared with them?

You must assign your guest the same license that's required for non-guests to run the app. For instance, if the app uses premium connectors, a Power Apps per app plan or a Power Apps per user plan must be assigned to the guest.

PlanSharePoint customized formStandalone canvas app using non-premium connectorsStandalone canvas app using premium connectorsModel-driven app
SharePoint user (no Power Apps license)x
Power Apps included with Officexx
Power Apps per app planxxxx
Power Apps per user planxxxx

For more information about pricing and the capabilities of various plans, go to Microsoft Power Apps and Power Automate Licensing Guide.

In Power Apps Mobile, how does a guest see apps for their home tenant?

Any user who has used their mobile device to access a canvas app that was published in an Azure AD tenant that isn't their home tenant, must sign out of Power Apps and sign back in to Power Apps Mobile.

In Power Apps Mobile, how does a guest see apps in the guest tenant?

The guest user opens the email they received when an app in the guest tenant was shared, and selects Open the app. This applies to both Azure AD and Microsoft account users.

Must a guest accept the Azure AD guest invitation before an app can be shared with them?

No. If a guest opens an app that was shared with them before they accepted a guest invitation, the guest will be prompted to accept the invitation as part of the sign-in experience while opening the app.

In which Azure AD tenant are connections created for a guest user?

Invitation

Connections for an app are always made in the context of the Azure AD tenant the app is associated with. For example, if an app is created in the Contoso tenant, the connections made for Contoso internal and guest users are made in the context of the Contoso tenant.

Can guests use Microsoft Graph via the Microsoft Security Graph connector or a custom connector by using Microsoft Graph APIs?

No, Azure AD guests can't query Microsoft Graph to retrieve information for a tenant in which they're a guest.

Which Intune policies apply to guests who are using my apps?

Intune only applies the policies of a user's home tenant. For instance, if Lesa@Contoso.com shares an app with Wanda@Fabrikam.com, Intune continues to apply Fabrikam.com policies on Wanda's device, regardless of the apps Wanda runs.

Which connectors support guest access?

Invitation Maker App

Connectors that don't use any type of Azure AD authentication will support guest access. The following table enumerates all connectors that do use Azure AD authentication, and identifies which connectors currently support guest access. More information: List of all Power Apps connectors

ConnectorSupports guest access
10to8 Appointment SchedulingNo
Adobe Creative CloudNo
Adobe SignNo
AsanaNo
AtBot AdminNo
AtBot LogicNo
Azure ADYes
Azure AutomationYes
Azure Container InstanceYes
Azure Data FactoryYes
Azure Data LakeYes
Azure DevOpsNo
Azure Event GridNo
Azure IoT CentralYes
Azure Key VaultNo
Azure KustoYes
Azure Log AnalyticsYes
Azure Resource ManagerYes
Basecamp 2No
BitbucketNo
BitlyNo
bttnNo
BufferNo
Business CentralNo
CandidateZipNo
Capsule CRMNo
Cloud PKI ManagementNo
Cognito FormsNo
Commmon Data ServiceYes*
Common Data Service (Legacy)No
D&B OptimizerNo
Derdack SIGNL4No
DisqusNo
Document MergeNo
Dynamics 365No
Dynamics 365 AI for SalesYes
Dynamics 365 for Fin & OpsNo
EnadocNo
EventbriteNo
Excel Online (Business)No
Excel Online (OneDrive)No
Expiration ReminderNo
FreshBooksNo
GoToMeetingNo
GoToTrainingNo
GoToWebinarNo
HarvestNo
HTTP with Azure ADNo
InfusionsoftNo
InoreaderNo
IntercomNo
JotFormNo
kintoneNo
LinkedInNo
Marketing Content HubNo
MediumNo
MetataskNo
Microsoft FormsNo
Microsoft Forms ProNo
Microsoft Graph SecurityNo
Microsoft KaizalaNo
Microsoft School Data SyncNo
Microsoft StaffHubNo
Microsoft TeamsYes
Microsoft To-Do (Business)No
Muhimbi PDFNo
NetDocumentsNo
Office 365 GroupsYes
Office 365 OutlookNo
Office 365 UsersYes
Office 365 VideoNo
OneDriveNo
OneDrive for BusinessNo
OneNote (Business)No
Outlook TasksYes
Outlook.comNo
PaylocityNo
PlannerNo
Plumsail FormsNo
Power Apps for AdminsNo
Power Apps for MakersNo
Power Automate ManagementNo
Power BIYes
Power Platform for AdminsNo
Project OnlineNo
ProjectWise Design IntegrationNo
Projectwise ShareNo
SharePointYes
SignNowNo
Skype for Business OnlineNo
Soft1No
StormboardNo
Survey123No
SurveyMonkeyNo
ToodledoNo
TypeformNo
VimeoNo
Webex TeamsNo
Windows Defender Advanced Threat Protection (ATP)No
Word Online (Business)No

* When using the Common Data Service connector, ensure that the guest user is licensed from the same tenant where you have Dataverse located.

See also

Invitation Maker App Printable

Edit an app
Restore an app to a previous version
Export and import an app
Delete an app