Docs
Overview

Permission Summary

Extension API Permissions Host Count
AppReview for Power Apps None 0
AutoReview for Power Automate unlimitedStorage, storage, identity, identity.email, activeTab, webRequest 2
Power DevBox Exceptions scripting, tabs, webRequest, storage, alarms 5
Power DevBox Share webRequest, storage, alarms 4
Power DevBox Shortcut storage, webRequest 5
Power DevBox Flow Utility unlimitedStorage, tabs, storage, sidePanel, webRequest 2
Security & Transparency

Chrome Extension Permissions

A detailed analysis of permissions required by Power DevBox Chrome extensions. We believe in transparency about what our extensions can access.

AppReview for Power Apps

v3.4.7

Create Automated Code Review of Canvas Power Apps

API Permissions

✓ No special permissions required

Host Permissions

✓ No host permissions

AutoReview for Power Automate

v3.2.6

Create Automated Review of Power Automate Cloud Flows

API Permissions

Permission Description How Extension Uses It
unlimitedStorage Removes quota limitations on client-side storage APIs (localStorage, IndexedDB) Stores large flow review data and config data without storage limits
storage Access to chrome.storage API for persistent local or synced data Stores large flow review data and config data
identity Access to the chrome.identity API for OAuth2 authentication To show who completed the upload in the review/report/solution files
identity.email Access to the user's signed-in email address To show in the review/report/solution files
activeTab Temporary access to the currently active tab when user invokes the extension Reads tab url to get environment and flow id for live flow mode
webRequest Observe and analyze traffic, intercept or modify requests in flight Used to get token to send API request to generate review of live flow

Host Permissions

Host Pattern Purpose
https://*.api.flow.microsoft.com/* Access Power Automate Flow API to retrieve flow definitions and metadata
https://make.powerautomate.com/* Interact with the Power Automate maker portal to analyze flows

Power DevBox Exceptions

v1.1.0

Creates Exception catch expression for Power Automate

API Permissions

Permission Description How Extension Uses It
scripting Execute scripts in the context of web pages via chrome.scripting API Injects exception handling code and UI elements into Power Automate pages
tabs Access to chrome.tabs API to query and modify browser tabs Reads tab url to get environment id
webRequest Observe and analyze traffic, intercept or modify requests in flight Used to get token to send API request to get the flow definition to generate the exception expression
storage Access to chrome.storage API for persistent local or synced data Saves token for if page closed
alarms Schedule code to run at specified times via chrome.alarms API Updates icon to notify when token has expired

Host Permissions

Host Pattern Purpose
https://*.dynamics.com/api/data/v9*" Access Dataverse API for workflows table for actions for exception handling
https://make.powerautomate.com/* Interact with Power Automate maker portal

Power DevBox Share

v1.0.10

Tool to help Power Platform developers share the contents of a solution

API Permissions

Permission Description How Extension Uses It
webRequest Observe and analyze traffic, intercept or modify requests in flight Used to get token to send API request to send Datavese updates
storage Access to chrome.storage API for persistent local or synced data Save token for if page closed
alarms Schedule code to run at specified times via chrome.alarms API Updates icon to notify when token has expired

Host Permissions

Host Pattern Purpose
https://*.dynamics.com/api/data/v9.0/* Access Dataverse API to retrieve solution component data
https://make.powerautomate.com/environments/* Access Power Automate environments to share flow data
https://make.powerapps.com/environments/* Access Power Apps environments to share app data
https://make.preview.powerapps.com/environments/* Access preview Power Apps environments for testing

Power DevBox Shortcut

v1.0.7

Shortcuts to your Power Platform Environments

API Permissions

Permission Description How Extension Uses It
storage Access to chrome.storage API for persistent local or synced data Saves user's environment detail and tags
webRequest Observe and analyze traffic, intercept or modify requests in flight Used to get token to send API request to get environment list and details

Host Permissions

Host Pattern Purpose
https://*.api.flow.microsoft.com/* Access Flow API to retrieve environment list and details
https://make.powerautomate.com/environments/* Navigate directly to Power Automate environments
https://make.powerapps.com/environments/* Navigate directly to Power Apps environments
https://make.preview.powerapps.com/environments/* Navigate to preview Power Apps environments
https://*.tenant.api.powerplatform.com/* Access tenant-level Power Platform API for environment discovery

Power DevBox Flow Utility

v3.0.9

Build tools for Power Automate

API Permissions

Permission Description How Extension Uses It
unlimitedStorage Removes quota limitations on client-side storage APIs (localStorage, IndexedDB) Stores history of flows visited
tabs Access to chrome.tabs API to query and modify browser tabs Checks url to see if new or classic ui (v3=true)
storage Access to chrome.storage API for persistent local or synced data Stores history of flows visited
sidePanel Display content in the browser's side panel Shows the Flow Utility interface in a persistent side panel for easy access
webRequest Observe and analyze traffic, intercept or modify requests in flight Used to get token to send API request to get flow display name to save to flow visit history

Host Permissions

Host Pattern Purpose
https://*.api.flow.microsoft.com/* Access Power Automate Flow API for build and utility operations
https://make.powerautomate.com/* Interact with the Power Automate maker portal

Questions about our extensions?

We're committed to transparency and security. Contact us if you have any concerns about permissions.

Contact Us