Guest User Login Issues in Business Central

Applies to Product – Dynamics 365 Business Central

What’s happening?
The affected user cannot log in to the Production environment through the Granular Delegated Admin Privileges (GDAP) relationship because the system recognizes the account as a guest user. This issue arises when a user has previously logged in as a guest and is now unable to access the necessary resources due to their account being deactivated.

Reason:
This is caused by the presence of a guest user account that has not been properly removed from the system. The user was created as a guest user in the client's tenant earlier, and after logging in, their account was recognized as a guest, which prevents them from accessing the Production environment through GDAP.

Resolution:
Remove the Guest User:

1. Go to the Azure Active Directory portal.
2. Navigate to Users > All users.
3. Find the guest user and click on Delete.

1. Ensure the user is removed from all environments.
2. Re-invite the user to the tenant with the correct GDAP permissions.

1. After re-inviting, verify that the user has the appropriate delegated admin permissions.
2. Test the login to ensure the user can access the necessary resources.

1. Disable the user in Business Central.
2. Open Business Central and navigate to Users.
3. Select the user you want to disable and change their status to Disabled.
4. Clear the user's personalization by going to User Settings and selecting Clear Personalized Pages.
5. Delete the user card if they have no transactions in the system.

1. Go to the Microsoft 365 Admin Center.
2. Select Users > Active users > Add a user.
3. Fill in the required details and assign the necessary licenses.
4. In Business Central, navigate to Users and select Update Users from Microsoft 365 to sync the new user.
5. Validate the connection to Exchange and set up contact synchronization.