We are announcing that the tenant setting “disableShareWithEveryone” that was previously set to “off” by default, will now be set to “on” by default. This means that makers will not be able to share their canvas apps with the “Everyone” group without changing this setting. We’re doing this to align with Microsoft’s recent security recommendations of being “Secure by Default”. Preventing sharing with this group aligns with this security posture due to the overexposure of data that comes with sharing an app with “Everyone” when it is not required.

How does this affect me?
If you have explicitly set the tenant setting “disableShareWithEveryone” to $false (i.e. enabling sharing canvas apps with “Everyone”), changes made to your tenant will be delayed. We will communicate via a new Message center post when we can change it for you.

If you haven’t explicitly set “disableShareWithEveryone” to $false, you can expect the change to take place by July 12, 2024.

No action is required on your part. We will start rolling out this change in the coming weeks.

• Canvas apps that are currently shared with “Everyone” will not break or be affected by this default change. This setting will only prevent future attempts to share canvas apps with “Everyone”. It does not affect any connections that were made before the setting was turned on.
• If you want to opt out of this default change, please reference the first link under “What do I need to prepare?” to turn the setting off.
• We recommend that you un-share your canvas apps with the “Everyone” group. If you need to share with a large group of people, consider sharing with one or multiple security groups instead.

What do I need to do to prepare?

1. For instructions enable sharing with “Everyone”: Secure the default environment – Power Platform.
2. To learn more about who “Everyone” is: Special Identities.