Financial reporter roles from user group

(3) Share

Report

Posted on by Ingmar Bickl

108

Hi,

we recently changed how roles are assigned. Instead of giving them to the user directly, we assign them to the user group (AD domain groups). This works well within FO. (Note: the basic role "system user" is still directly assigned to the user)

Path: System administration -> Users -> Groups

However, the users then apparently lost access to the Financial reporter. I had to give them roles directly on the user again and they could access financial reporter again.

Is there a way to transfer the roles from the group to Financial Reporter?

Edit: It seems my screenshot doesn't appear in the post, so i added the screenshot as attachment

Screenshot 2025-12-05 095006_User Groups.png

Categories:

Dynamics 365 Finance

I have the same question (0)

All responses (5)

Answers (1)

Sohaib Cheema 49,677 Super User 2026 Season 1 on at

Like (1)

Report
Copy link

Link copied!

Hi,

I cannot see your screenshot. How did you manage assigning the roles to user groups? Are you sure it was user groups or AD(Active directory) groups?

Are you talking about upcoming new feature?

Was this reply helpful? Yes No
Ingmar Bickl 108 on at

Like (0)

Report
Copy link

Link copied!

Hi Sohaib,

it was the AD groups. The screenshoot shows this form, The users also have the correct roles within FI.

Was this reply helpful? Yes No
Sohaib Cheema 49,677 Super User 2026 Season 1 on at

Like (1)

Report
Copy link

Link copied!

Hi,

1) Did you assign any of these roles to the AD group? If not, you should assign one of these.

https://learn.microsoft.com/en-us/dynamics365/finance/general-ledger/financial-reporting-getting-started#roles

2) If you did assign any of these roles to the user, could you have customized roles, preventing the access?

1 people found this reply helpful.

Was this reply helpful? Yes No
Verified answer

André Arnaud de Cal... 303,314 Super User 2026 Season 1 on at

Like (2)

Report
Copy link

Link copied!

Hi Ingmar,

The standard Entra ID groups integration comes with some caveats. I wrote about this on my blog before. One of them is that there is some business logic that checks role assignments on the users. The application is then not aware of inherited permissions via the Entra ID groups.

To overcome this issue, you can use a solution shared as open source on GitHub. This is a tool I added to a D365 FO admin toolkit. This toolkit is free to use. You can read more here and download the solution: Enhanced Entra ID group integration in D365FO Admin Toolkit - Dynamicspedia

1 people found this reply helpful.

Was this reply helpful? Yes No
Ingmar Bickl 108 on at

Like (1)

Report
Copy link

Link copied!

Hi Andre,

thanks, this is really helpful. And extra thanks fpr providing the toolkit! I#ll go back to the customer

Hi Sohaib,

I used the roles "Security administrator" and "Account Manager". I think the issue is with the limitations of entra Id groups. Thanks for you help!

Was this reply helpful? Yes No