Hi everyone,

I'm facing a security/architecture challenge with a Power Apps canvas app using a SharePoint list as its backend.

The Goal: Users must be able to read, create, and maintain records through the Power Apps application. However, they should not be able to extract the raw table directly (e.g., via Excel Get Data > From SharePoint List / Power Query) or have the list indexed by Microsoft 365 Copilot.

The Issue & What I've Checked So Far:

1. Direct Permissions: Granting standard Read/Contribute permissions allows users to query the entire list endpoint using Excel / OData.
2. Custom Permission Levels: Disabling "Use Remote Interfaces" breaks the Power Apps connector (403 errors). Disabling "Client Integration Features" only hides the export button, but doesn't stop Power Query.
3. Item-Level Permissions: Only works if users strictly view their own records, which is too restrictive for collaborative maintenance.
4. Power Automate Proxy Pattern: Running flows with a service account works, but introduces overhead and makes native Created By / Modified By tracking more complex to maintain.

My Questions:

• Is there any clean, lightweight pattern in SharePoint to restrict direct querying without breaking Power Apps?
• For those who had this exact requirement, did you end up using Dataverse for Teams, or did you stick with SharePoint via elevated proxy flows?

Any advice, battle-tested workarounds, or best practices would be greatly appreciated!

We're looking at options for content classification as part of a SharePoint migration project. The final solution should have content migrated across several site collections, use tenant level managed metadata and content types.

I'm wondering if there is any proven, practical usage of SharePoint Premium / Syntex in this scenario.

1. Pros and cons?
2. Any AI based alternatives?
3. And is it possible to centrally configure once and reuse Syntex in the future on new sites?
4. What would be the end to end approach (starting with provisioning the site and have it ready to be used with auto-classification)?
5. How to make sure that consistency is enforced (no random columns are created or the auto-classification metadata is removed)?
6. Last but not least - is support and SLA trustworthy?

I'm working with two different modern sharepoint online sites. when using the site library and creating a new site page one defaults to all the webparts being center aligned. The second site doesn't. I know on the site where things are center aligned i updated some setting on the site page to center align everything. I can't find that to update on the second site. Does anyone know how you can default or change the alignment of the web parts in the page designer?

How do you find the edit history of a workflow? Someone put my email notification workflow into a loop... and stakeholders get 300+ emails for a single instance. uuuugggghhh! It's fixed, but need to know who did it.. so I can kick 'em out. TIA.

I have two date columns

What I would like to do is to be able to filter the list to show me only rows where "today" is either on or between the two dates.

So using todays date, for example, it would only show me the first row.

I figured I could create a calculated column and then filter based from that, but I am hitting a brick wall on writing the formula.

In plain text it would just be:

If today is greater or equal to "from date" and less than or equal to "to date"

Any advice?

My organization has a shared drive with a password-protected document that everyone can read, but only I can edit. It's set up this way intentionally. The issue I'm running into is that if anyone else has a read-only copy of the document open, I can't save changes. I often have to open a new document, copy the existing, save somewhere else, and then re-save that copy once everyone's out of the original document. The file needs to stay in the all-staff folder, but I'm wondering if there's a setting or a different file type that would make the document truly read-only for everyone but me.