Microsoft Copilot
Take control of Power Apps before they sprawl
Rencore inventories the canvas apps your people build, with their owner, environment, connections and sharing. Policies rank the apps that have no owner, are shared with everyone or need a premium licence, and owners and access are fixed from one place.
Citizen-built apps spread faster than anyone can list them
The questions are the ones you already ask of a Team or a SharePoint site: who built it, who can use it, what it connects to, what it costs and who owns it when the maker moves on.
Who owns it
Apps outlive the people who made them. An app with no owner and no co-owner cannot be fixed or retired, and nobody is asked when it breaks.
Who can open it
A canvas app can be shared with named users and groups, or with everyone in the tenant. Share counts and the everyone flag show which apps reach the most people.
What it costs
Apps that use premium connectors, custom connectors or the common data service need a premium licence. Finding them one app at a time does not scale.
What it connects to
Each app lists its connections, and whether it uses a custom API or an on-premises gateway. Without an inventory, that detail stays inside the app.
What Rencore sees and does in Power Apps
Every canvas app, with its owner, environment and sharing
Rencore inventories the canvas apps in your tenant with their environments, connections and versions. Each app is related to the users and groups behind it, so a report can rank the apps shared most widely and name the owner of each.
- Owner, co-owners, creator, and who last modified and published the app
- Number of users and groups the app is shared with, and whether it is shared with everyone in the tenant
- Whether the app uses a premium API, a custom API or an on-premises gateway
- Environment, connections and every version of the app
- A risk score on every app, scanned daily by default
Premium licence cost, found before the invoice
Apps that use premium connectors, custom connectors or the common data service need a premium licence for the people who use them. A policy lists them, so platform teams can consolidate duplicates and retire what nobody runs before the cost lands.
- A policy for Power Apps that require a premium licence (severity Information, category Costs)
- A premium API flag and a plan classification on each app
- The connector behind the premium requirement, visible per app
Owners fixed and access reviewed from one place
A policy lists the canvas apps with no owner or co-owner, and another the apps shared with everyone in the tenant. Owners and run-only access are then changed with an action, and the Rencore Teams app can ask owners to review access on a schedule.
- A policy for canvas apps without owners (severity High, category Operation)
- A policy for canvas apps shared with everyone in the tenant (severity Information, category Security)
- Actions to add or remove an owner user, an owner group, a run-only user or a run-only group
- Access and sharing reviews for Power Apps, started ad hoc or on a schedule and delegated to end users in the Rencore Teams app
What the Power Apps connector covers
What Rencore reads in Power Apps, and what it needs to do so.
Canvas apps
The Power Apps inventory is built on canvas apps. Model-driven apps are not part of it.
One consenting account
Microsoft 365 does not let third parties scan Power Apps and Power Automate with application permissions. The scan runs under delegated permission, with a dedicated Power Platform Administrator account that is not a Global Administrator.
Access actions only
The actions available for Power Apps change who owns an app and who can run it. There are four, covering owner and run-only users and groups.
Apps, Automation and BI
Power Platform
Inventory Power Platform environments, apps and flows, rank them by risk and cost, and ask owners to act.
View the Power Platform connectorPower Automate
Inventory Power Automate flows with owners, state, runs and connections, and run policies over stopped, unused and premium flows.
View the Power Automate connectorPower BI
Prevent Power BI oversharing and sprawl, keep license costs in check and review access on a schedule.
View the Power BI connectorFabric
Inventory Fabric and Power BI workspaces, datasets, dataflows, pipelines and capacities, and find the unused and externally shared ones.
View the Fabric connectorPower Apps questions, answered
Which Power Apps objects does Rencore inventory?
Canvas apps, with the environments they live in, their connections and their versions. Each app carries its owner, co-owners, creator, last modification and publication, the number of users and groups it is shared with, whether everyone in the tenant can open it, and a risk score. Apps are scanned daily by default.
What does Rencore need to scan Power Apps?
A dedicated user account that gives the consent. Microsoft 365 does not allow third parties to connect to Power Apps and Power Automate with application permissions, so this is the one Rencore scanning application that runs on delegated permission, and that account is used during every scan. It needs the Power Platform Administrator role, assigned permanently and not through a temporary elevation, and it must not be a Global Administrator. Microsoft requires multi-factor authentication for administrators, so MFA has to be set up for it, or the permissions are revoked.
Does Microsoft already cover this?
In part. The Power Platform admin center is Microsoft's own place to manage environments and apps. Microsoft stopped actively maintaining the Power Platform Center of Excellence Starter Kit in May 2026 and points customers to the admin center. Rencore does not replace either. It adds the apps in one inventory beside your Teams, SharePoint sites and flows, policies with a severity and a trend, and actions and reviews that put an owner on every app. Our comparison of Rencore and the CoE Starter Kit sets out the differences.
How is Power Apps coverage licensed?
Power Apps is part of the Apps, Automation and BI module, an optional paid module on the Premium and Enterprise plans. The Professional plan does not include it. The pricing page has the full plan comparison.