web
You’re offline. This is a read only version of the page.
close
Skip to main content
News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Finance | Project Operations, Human Resources, ... / sending email
Finance | Project Operations, Human Resources, ...
Suggested answer

sending email

(3) ShareShare
ReportReport
Posted on by SC-08041706-0 38
We are wanting to do the following option
 

Option 1 — Allow a dedicated account or app while keeping security controls

 

  • Create a dedicated service account (or group) for GP’s email integration and exclude it only from the “Require compliant device” control in the relevant CA policy. Keep MFA and add Named locations (restrict to your public IPs) to maintain a strong posture. Microsoft’s guidance explicitly calls out excluding service accounts from device‑compliance CA policies and using CA for workload identities where appropriate. [3]

  • Alternatively (or additionally), scope the CA policy so it excludes the GP app registration / service principal used for Graph, then compensate with IP/location and auth‑strength requirements. (Calls made by service principals aren’t affected by user‑scoped policies; use CA for workload identities if you need controls on the app itself.) [3
 
How do you configure GP to use the account - do we add it to the APP or to the GPMFA registration that we setup - then how does that work for a user to connect using their email
Categories:
Microsoft Dynamics GP
I have the same question (0)
  • Suggested answer
    Cyrille Nembot Profile Picture
    Cyrille Nembot 149 on at
    sending email

    You add the dedicated service account's credentials directly into the Dynamics GP application itself (within the "E-mail Setup" window). You do not add it to the Azure AD App Registration. The App Registration is for user authentication; the service account is for sending mail on behalf of the authenticated user.

    The
    user still connects with their own modern account (MFA, compliant
    device, etc.), but when GP needs to send an email, it uses the
    pre-configured, trusted service account to connect to Graph API and send
    the message.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

News and Announcements

Dynamics 365 Community Calls Return
Join experts in person to explore low code and AI agents at the Power Platform Community Conference sponsored by Microsoft
Responsible AI policies for the Community

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Andrés Arias – Community Spotlight

We are honored to recognize Andrés Arias as our Community Spotlight honoree for…

Congratulations to the August Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > Finance | Project Operations, Human Resources, AX, GP, SL

#1
Sohaib Cheema Profile Picture

Sohaib Cheema 775 User Group Leader

#2
Martin Dráb Profile Picture

Martin Dráb 634 Most Valuable Professional

#3
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 622 Super User 2025 Season 2

Last 30 days Overall leaderboard

Featured topics

End-of-life Announcement for Microsoft Dynamics GP

Product updates

Dynamics 365 release plans