Login in to FO instance in the absence of original admin - not looking to re-create/spinning

(0) Share

Report

Posted on by SRSSDyn365

Hi,

Deployed a Dynamics D365 FO through LCS initially by another Administrator-A on Azure cloud VM after two weeks Admin-B trying to install components, but getting - error "You are not authorized"

Admin-A not granted "Power User" access to any other in Admin-Group. In such situation Is there a work around to login in to D365 F&O back bone system by Admin-B without spinning again another F&O instance right from beginning?

Admin-B in Admin-Group has Admin rights to CLOUD-VM box & LCS admin rights. Following tasks done but no result:

- Changed AOSservice - DynamicsDevConfig.xml file to replace <OfflineAuthenticationAdminEmail>XXXXX</OfflineAuthenticationAdminEmail> where XXXX is Admin-A email adm_a@contoso.onmicrosoft.com to adm_b@contoso.onmicrosoft.com at K:\AosService\PackagesLocalDirectory\Bin

- Restarted IIS server, still getting error

- Dynamics AX v10.x i.e. latest

- No changes made in LCS and still showing old adm_a@contoso.onmicrosoft.com email in "Full Details" page of LCS

- We know if adm_a grants "Power User" role to adm_b then next admin can install additional components. But curious if there is any work around for this scenario without recreating cloud-VM instance

Looks like there are some other references needs to be changed for Cloud hosted systems

Any clues are appreciated.

Thanks.

I have the same question (0)

All responses (5)

Answers (1)

Suggested answer

Sukrut Parab 71,710 Moderator on at

Like (0)

Report

Log in to that VM using. Admin credentials present on the LCS. Then try to open D365 URL from that VM and add other users as admin.

Was this reply helpful? Yes No
Verified answer

André Arnaud de Cal... 301,075 Super User 2025 Season 2 on at

Like (3)

Report

Hi,

If there is a VM deployed on Azure, the LCS environment shows you the VM details and credentials. Open a remote desktop session to this machine. Then in the folder K:\AosService\PackagesLocalDirectory\bin, you will find a file called AdminUserProvisioning.exe. If you run this, the administrator account credentials within the environment will be replaced with the new administrator. LCS might still show the original person who deployed it, but you should be able to run Microsoft Dynamics 365.

Was this reply helpful? Yes No
Suggested answer

Martina123 on at

Like (0)

Report

Hi,

If it’s Dev or Sandbox environment, then you can use AdminUserProvisioning tool as Andre said, but the information on LCS page won’t be updated.

If it doesn’t help, you may also refer to this link for help

https://docs.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/sysadmin/vms-no-admin-access

Was this reply helpful? Yes No
Suggested answer

SRSSDyn365 55 on at

Like (0)

Report

Hi

Thank you Andre and others, it worked. Once AdminUserProvisioning.exe ran AAD-Global dialog drop down box popped-up to update new email, that's the key. Just curious question, does alone AdminUserProvisioning.exe works without updating <OffLineEmail>xxx@abc.onmicrosoft.com</OffLineEmail> in DynamicsDevConfig.xml file?

Thanks again and appreciate help & support.

Was this reply helpful? Yes No
André Arnaud de Cal... 301,075 Super User 2025 Season 2 on at

Like (0)

Report

HI,

The admin provisioning tool works without changing the DynamicsDevConfig file. I'm not sure what this file and setting is used for.

Was this reply helpful? Yes No