Cloud hosted environments testing user roles no longer possible

(3) Share

Report

Posted on by ThomasWilke

764

Hi all,

lately I noticed that I can no longer log-in to my D365 F&O cloud hosted environment with an end user account that doesn't have the System administrator role.

When I try to access D365 with a test user I get this error messaage:

You are not authorized to login with your current credentials. You will be redirected to the login page in a few seconds.To troubleshoot signin issues, please visit https://go.microsoft.com/fwlink/?linkid=2252604.

As soon as I assign SysAdmin to that user I can log in again.

Is this a new feature to avoid user role testing or do I have to set something up to access the environment?

System is not set to maintenance mode

I have the same question (0)

All responses (8)

Answers (1)

André Arnaud de Cal... 299,386 Super User 2025 Season 2 on at

Like (1)

Report

Cloud hosted environments testing user roles no longer possible

Hi Thomas,

Can you tell us what exact roles are assigned to the user? Is the user part of the same tenant or having a different tenant?
You can read my blog about a recent change in enforcing security best practices and some reasons for invalid users. Maybe this helps you: Invalid users in Dynamics 365 F&O - 10.0.39 update - Dynamicspedia

Was this reply helpful? Yes No
Anthony Blake 2,770 Super User 2025 Season 2 on at

Like (1)

Report

Cloud hosted environments testing user roles no longer possible

Hi,

Did you recently refresh the database? Is the user enabled in Sys Admin -> Users?

Was this reply helpful? Yes No
ThomasWilke 764 on at

Like (1)

Report
Cloud hosted environments testing user roles no longer possible

Thank you for the replies.

Did you recently refresh the database?

Yes, restored a bacpac

Is the user enabled in Sys Admin -> Users?

Yes, sure

The user is enabled

The user is not listed as an invalid user

We tried deleting and recreating the user without luck

As soon as we assign System administrator role the user can log in

If we remove System administrator and just assign whatever D365 standard role - the user can no longer log in

Can you tell us what exact roles are assigned to the user?

For example AR clerk, actually it does not matter.

Is the user part of the same tenant or having a different tenant?

Yes - same tenant

The only thing that I noticed is that the environment is not able to import users. I get the message Authorization required.

Does anyone know if the integration of cloud hosted environment to entra id is mandatory to use roles?

Secure one-box development environments - Finance & Operations | Dynamics 365 | Microsoft Learn

Was this reply helpful? Yes No
André Arnaud de Cal... 299,386 Super User 2025 Season 2 on at

Like (1)

Report

Cloud hosted environments testing user roles no longer possible

Hi Thomas,

Your last comment is interesting and could be indeed the culprit. Have you tried setting up the certificate for security? Then the import of users will work and potentially your issue with the test users will be resolved. I'm not using a cloud-hosted environment myself as I deployed some new Unified Development Environments. In these UDE environments, I don't encounter an issue with non-administrators nor the import of users from Azure Entra ID.

PS. Does this test user have the System user role assigned?

Was this reply helpful? Yes No
ThomasWilke 764 on at

Like (2)

Report

Cloud hosted environments testing user roles no longer possible

Hi André,

we will try to add the certificate and test again.

The user has System user assigned + the roles we use for testing.

I guess it has something to do with the certificate and the entra connection.

Was this reply helpful? Yes No
Verified answer

ThomasWilke 764 on at

Like (1)

Report

Cloud hosted environments testing user roles no longer possible

After adding the certificate and enabling access to entra. I can confirm that non admin users are able to access the cloud hosted environment again.

Was this reply helpful? Yes No
Suggested answer

Valery Plotnik 24 on at

Like (1)

Report
Cloud hosted environments testing user roles no longer possible

This particular problem could be solved without creating app registration.

The root cause of this issue is D365F&O tries to fetch security groups your user is member of. You can control this behavior with Configuration key and completely disable it.

Here is the quick guide how to disable it on DEV CHE:

Open a PowerShell window as admin.

Install d365fo.tools if not installed yet via typing following in PowerShell window: Install-Module d365fo.tools

Enter the Maintenance mode via typing following in PowerShell window: Enable-D365MaintenanceMode

Open License configuration form and uncheck Administration → "Microsoft Entra ID security group", press Save and confirm the dialog.

Exit the Maintenance mode via typing following in PowerShell window: Disable-D365MaintenanceMode

Enjoy the F&O without System administrator!

1 people found this reply helpful.

Was this reply helpful? Yes No
André Arnaud de Cal... 299,386 Super User 2025 Season 2 on at

Like (0)

Report

Cloud hosted environments testing user roles no longer possible

Hi Valery Plotnik,

Are you responding to the correct question? Note that the Entra ID groups didn't have any relation with this question asked by Thomas.

Was this reply helpful? Yes No