Hi,
We’ve built a custom portal where users sign in through Microsoft Entra ID, and we’d like them to manage their own D365 CRM (Dataverse) data directly from this portal.We found this Microsoft tutorial on impersonating users using the CallerObjectId
header:
🔗 Impersonate another user (Microsoft Docs)
createdby
field correctly shows the impersonated user.
However, we’re not sure whether data visibility also follows this impersonation logic.
Specifically, does Dataverse enforce the same visibility rule where:Managers can view their team’s data,
Team members can only access their own data, when requests are made using CallerObjectId
Any guidance or confirmation from experts would be greatly appreciated.
Thank you!