Home > Microsoft > Configure Scan Profiles > Create Scan Profiles for Power Platform

    Export to PDF

    Create Scan Profiles for Power Platform

    To create a scan profile, refer to the following steps:

    1. Choose object types – In the Tenant drop-down list, select a tenant for which the scan profile is created. Then, select the object types to be included in a scan profile for Power Platform.

      The table below lists the services and apps which can scan Power Platform objects:

    ServiceApp typeScan object typesRequired license/role
    Cloud Backup for Microsoft 365delegated appPower App, Power Automate, and Power BIThe Power Platform Administrator role must be assigned to the consent user of the app profiles for scanning Environments, Connections, Power Apps, Solutions, Power Automate, or Power Pages objects.The Power BI license and Fabric Administrator role must be assigned to the consent user of the app profiles for scanning Power BI objects.
    Cloud GovernanceCloud Governance for Power PlatformEnvironment, Power App, Power Automate, and Power BIThe Power Platform Administrator role must be assigned to the consent user of the app profiles for scanning Environments, Connections, Power Apps, Solutions, Power Automate, or Power Pages objects.The Power BI license and Fabric Administrator role must be assigned to the consent user of the app profiles for scanning Power BI objects.
    Cloud Governancecustom app with delegated permissionsEnvironment, Power App, Power Automate, and Power BIThe Power Platform Administrator role must be assigned to the consent user of the app profiles for scanning Environments, Connections, Power Apps, Solutions, Power Automate, or Power Pages objects.The Power BI license and Fabric Administrator role must be assigned to the consent user of the app profiles for scanning Power BI objects.
    EnPowerEnPower for Power PlatformEnvironment, Connection, Power App, Power Automate, Power BI, Solution, and Power PagesThe Power Platform Administrator role must be assigned to the consent user of the app profiles for scanning Environments, Connections, Power Apps, Solutions, Power Automate, or Power Pages objects.The Power BI license and Fabric Administrator role must be assigned to the consent user of the app profiles for scanning Power BI objects.
    EnPowercustom app with delegated permissionsEnvironment, Connection, Power App, Power Automate, Power BI, Solution, and Power PagesThe Power Platform Administrator role must be assigned to the consent user of the app profiles for scanning Environments, Connections, Power Apps, Solutions, Power Automate, or Power Pages objects.The Power BI license and Fabric Administrator role must be assigned to the consent user of the app profiles for scanning Power BI objects.
    FlyFly for Power PlatformEnvironment, Power App, and Power AutomateThe Power Platform Administrator role must be assigned to the consent user of the app profiles for scanning Environments, Connections, Power Apps, Solutions, Power Automate, or Power Pages objects.The Power BI license and Fabric Administrator role must be assigned to the consent user of the app profiles for scanning Power BI objects.
    InsightsInsights for Power PlatformPower BIThe Power Platform Administrator role must be assigned to the consent user of the app profiles for scanning Environments, Connections, Power Apps, Solutions, Power Automate, or Power Pages objects.The Power BI license and Fabric Administrator role must be assigned to the consent user of the app profiles for scanning Power BI objects.
    Click **Next** to proceed.

    2. Profile settings – Refer to the information below to configure the profile settings:

    - **Name** – Enter a name for the profile. - **Description** – Enter an optional description for the profile. - **Scan personal workspaces** (for Power BI only) – If you want to scan personal workspaces, turn on this toggle. - **Enable daily scan** – If you want to run this scan profile every day, turn on this toggle. The default start time of the daily scan job is displayed, and you can customize the start time when necessary. - **Send an email notification to the following recipients when objects are moved to other containers or removed from any containers** – Objects will be automatically moved to other containers when they match the containers’ rules. If you want to enable this notification, turn on the toggle. Then, select an email recipient profile from the **Notification profile** drop-down list. Whenever objects are moved to other containers or removed from AOS containers, the recipients in the selected profile will receive email notifications. If necessary, click **Create email recipient profile** to create one. For more instructions on configuring email recipient profiles, refer to [Email Recipient Profile](#missing-link). Click **Next** to proceed or click **Previous** to go back to the previous page.

    3. Configure containers and rules – Refer to the information below to choose a scan mode:

    - **Express mode** will scan objects into default containers. This mode is the simplest way to get started. - **Advanced mode** will scan objects dynamically to containers defined by business rules you configure. If you select the advanced mode, follow the instructions below to configure containers and rules for each object type: 1. To add a rule, click **Add**. The **Add rule** pane appears on the right of the page. 2. **Select a container** – Select a container from the drop-down list. If necessary, click **Create** **container** to create one. 3. **Rule** – Select **All objects in one container** or **Specified objects in one container** as the rule for this container. > ***Note**: If you have configured criteria for the **Specified objects in one container** rule, you can click **Rule for excluded objects** to configure an additional rule for the objects that do not meet the criteria. If you select the **All objects in one container** rule, you will not be allowed to add other rules. 4. **Rule criteria and values** – If you select **Specified objects in one container**, follow the instructions below to configure **Rule criteria and values** to define specified objects. - To set a criterion, select an option from the drop-down list, and then configure values in the textbox. For more information on the supported criteria, refer to [Supported Criteria in Auto Discovery Rules](#missing-link). - To add a criterion, click the add (![Button: add](/en/getting-started/microsoft/configure-scan-profiles/images/image41.png "Button: add")) button; to delete a rule, click the delete (![Button: delete](/en/getting-started/microsoft/configure-scan-profiles/images/image42.png "Button: delete")) button. - With multiple criteria, you must select **And** (objects that meet all criteria will be scanned into the container) or **Or** (objects that meet any of the criteria will be scanned into the container) as the logic for the criteria. > ***Note**: The rules are executed sequentially from top to bottom, for example, ((1 And 2) Or 3). 5. Click **Add** at the bottom of the **Add rule** right pane to add the configured rule. 6. If you add multiple containers, set a container’s priority by selecting a number from the **Priority** drop-down list. 7. If you select the **Specified objects in one container** option, for the condition when the scan profile discovers objects that don’t meet the criteria configured in rules, you can click **Rule for excluded objects** to configure an additional rule. The default option of the additional rule is **Do not add them to any containers**. If you change the rule to **Add them** **to one container**, select a container from the drop-down list. Then, click **Save**. 8. If you want to edit or remove a rule, hover the mouse on the rule, click the more options (![Button: more options](/en/getting-started/microsoft/configure-scan-profiles/images/image43.png "Button: more options")) button, and then click **Edit** or **Remove**. Click **Next** to proceed or click **Previous** to go back to the previous page.

    4. Have an overview of the settings in the scan profile, and take one of the following actions:

    - If you want to save your configurations in the scan profile, click **Save**. - If you want to run the scan profile immediately, click **Save and** **run**. - If you want to go back to the previous page, click **Previous**.