SBX - Search With Button

SBX - Forum Post Title

Portals: How to add webroles to Azure AD (guest) users

Microsoft Dynamics CRM Forum

Erik ten Brinke asked a question on 9 May 2019 2:31 AM

Question Status

Suggested Answer

Good morning,

For a portal project we are looking into using Azure AD for our portal users, using guest accounts in the Azure AD.
I cannot find any documentation on how to add webroles to such a guest account, e.g. how to control privileges on the portal.

Are Azure AD guest accounts automatically created as contacts in D365? and there we can add webroles? Or how does it work?

Thanks in advance,

Erik

Reply
Pranav Shroti responded on 10 May 2019 3:34 AM
My Badges
Suggested Answer

External users will get a email invite... once they accept then they will be created as guest users in AD with their email ID as unique identifier. Now they will behave exactly like normal users in AD. You will have to assign Dynamics license to them and they will be able to access CRM. Once they are normal users in D365 then they can be treated as contacts in Portals.

Reply
Erik ten Brinke responded on 10 May 2019 6:51 AM

Thanks for the reply pranav. So that removes the benefit of not having to arrange licenses for portal users, since you are then not using D365 contacts as a basis?

But in the end they will still have to have a contact record in D365, so we can control privileges via a webrole?

Reply
Pranav Shroti responded on 10 May 2019 7:16 AM
My Badges
Suggested Answer

Hi,

Your question was targeted towards AD guest users. Anyways...If you dont want to create a user as guest in AD, then end customers will be directly able to access CRM portal directly. No need to assign licenses. They will be contacts in CRM and users on Portal.

Have a look at this diagram. If users are part of companies business process then licenses will be required otherwise for customers it won’t be necessary.


Reply
Erik ten Brinke responded on 14 May 2019 1:46 AM

Yeah I get that Pranav :) In the meantime I understood that AzureB2C user accounts will be automatically also created in D365 as contacts when the instance are linked, so we can work from there.

Reply
Pranav Shroti responded on 14 May 2019 2:54 AM
My Badges

If found useful, please mark the answer as verified... this will close the loop and in turn, help other community members.

Reply
Pranav Shroti responded on 10 May 2019 3:34 AM
My Badges
Suggested Answer

External users will get a email invite... once they accept then they will be created as guest users in AD with their email ID as unique identifier. Now they will behave exactly like normal users in AD. You will have to assign Dynamics license to them and they will be able to access CRM. Once they are normal users in D365 then they can be treated as contacts in Portals.

Reply
Pranav Shroti responded on 10 May 2019 7:16 AM
My Badges
Suggested Answer

Hi,

Your question was targeted towards AD guest users. Anyways...If you dont want to create a user as guest in AD, then end customers will be directly able to access CRM portal directly. No need to assign licenses. They will be contacts in CRM and users on Portal.

Have a look at this diagram. If users are part of companies business process then licenses will be required otherwise for customers it won’t be necessary.


Reply

SBX - Two Col Forum

SBX - Migrated JS