Implementing Access Restrictions in Project for the Web iFrame
IntroductionIn this blog, I’m going to share about Project for the web iFrame which plays an important role in task planning. It allows users to view, create, update, and manage project tasks directly inside Dynamics without leaving the system. However, one major challenge has been the lack of restrictions inside this iFrame — meaning that anyone with access to the project record could freely make changes. With the upcoming update, Microsoft is bringing access control inside the Project for the web iFrame. This gives project managers and admins the power to decide who can do what. Public preview: May 16, 2025; General availability: Mar 2026 Problem StatementUntil now, once a user had access to a project record, they could: This lack of restrictions often led to: For example, if a sales executive (who is not part of the project delivery team) but has access to the record, opens the iFrame, they still had access to create or delete tasks which could cause confusion and project delays. UPDATE: The new feature introduces a security system for Project for the web iFrame that allows: This means if a user is part of project team member, their access can be limited to read-only mode. Availability Timeline: HOW TO ENABLE?? After Enabling, within few minutes, Go to Project team member you will see a Read only column on form. EXAMPLE: A team member can only read the iFrame. So, for that we will provide read access. After, providing read access, User will not be able to edit anything on the iFrame. Everything will be read only. CONCLUSIONThe new access restriction system for Project for the web iFrame ensures that only the right people can make the right changes, at the right time. By giving admins and project managers fine-grained control. With this feature rolling out from May 2025 (preview) and March 2026 (GA), organizations can start planning their access control strategies to take full advantage of it. Thank you, Kalyani for your valuable inputs!