Frequently asked questions
Is PowerToolBox really free?
Yes, today. The app is free while in early access: no license key, no account, no credit card. A paid licensing model is planned for later — see the licensing overview for what is planned and what stays the same.
What happens to my install when pricing launches?
Under the planned model, existing installs keep working. Nothing on your machine would be remotely disabled. The plan is a 14-day trial with license-key activation after that, and the transition for early-access installs is part of the specification, which is still subject to change. No pricing or date has been announced. The licensing overview has the full planned model.
How hard is the authentication setup?
The app sign-in is the easy part; the Entra ID app registration is where the work is. You need an app registration with specific application permissions, admin consent, and a certificate or client secret, and the service principal needs the Power Platform Admin role. Once that exists, put the tenant ID, client ID, and credential in the Authentication section of appsettings.json and restart the app. The full walkthrough is in connecting with an Entra app registration.
What permissions does PowerToolBox need?
The connection wizard lists two sets of application permissions:
- Microsoft Graph:
User.ReadandDirectory.Read.All - Power Platform API:
Environment.ReadandFlow.Read.All
All are application permissions and require admin consent. The service principal also needs the Power Platform Admin role to enumerate environments and flows; Dataverse tools need at least a read-only security role in the target environment.
Can I audit more than one tenant?
Yes, one tenant per app launch. Each tenant needs its own app registration and consent. In 1.2.0 the audit reads its sign-in from the Authentication section of appsettings.json, so you switch tenants by editing those values and restarting — or by keeping one extracted copy of the app per tenant. See Multiple tenants.
Where do exports go?
Wherever you choose. The Flow Auditor’s Export menu opens a Save-As dialog and writes JSON, CSV, Markdown, HTML, or Excel. See Report formats and Export and share findings.
Does PowerToolBox work offline?
The Flow Documentation tool does: point it at exported flow .json files or a solution .zip and it generates documentation locally with no sign-in. Flow Auditor audits live environments, so it needs internet access to sign in to Entra ID and call the Power Platform APIs.
What leaves my machine?
By default the app calls Microsoft endpoints only: Entra ID for sign-in, the BAP and Flow APIs, Dataverse, and Microsoft connector-icon hosts. Audit data — flow definitions, findings, scores, reports — is written locally and never sent anywhere. If you configure your own AI provider, finding metadata goes to the endpoint you choose; see Configure AI resolutions. If paid licensing launches later, the plan adds license validation calls to TerraKode’s API and nothing else.
How do updates work?
Manually. Download the new zip from the install page and replace the app files. There is no auto-updater. Your settings, logs, and token cache live under %APPDATA%\PowerToolBox\ and %LocalAppData%\PowerToolBox\, outside the app folder, so replacing the app files keeps them. See Update or uninstall.
Where are the logs when support asks for them?
In %APPDATA%\PowerToolBox\logs, as rolling powertoolbox-.txt files. Secrets are redacted before anything is written. Attach the newest file to your ticket on the support page, and include the correlation ID if the error message showed one. See Find logs and diagnostic data.
Last updated: July 27, 2026