I am creating a SP Online invoice system using MS Flow to send approvals for the invoices. The steps for the flow are as follows.
Account team makes an item in a list for an invoice. Based on the data entered, a manager gets an approval form emailed by the flow. the manager needs to view the item in SP before approving or rejecting it. manager's decision makes the flow move onto the next steps
My issue here is that because the manager needs "Read" permission to view the item in SP, they can see ALL invoices. My initial solution was to create a view for managers, however HR says that's not good enough because they can figure out how to change a view.
I looked into item level permissions and that is where I'm stuck. I can select item level permission to "Read items that were created by the user" however the managers dont create the items, they just approve them. Is there some way I can "Share" the item an approver needs to approve with the flow, using the "read items created by user" option?
Or is there another way I could restrict managers viewing items that they have nothing to do with?
I know that using MS Flow, the approver doesnt need read permission, but as I mentioned the approver needs to view the item in SP before approving so I cannot take that permission away.