Hi,
Whenever we are adding a new system user to Dynamics 365, we noticed that the Customer Service app access OOB role is automatically assigned by default to the new user. We currently have v9.0 of Dynamics CRM.
Anyone knows if this is an expected behavior with Dynamics 365 online, if so can this be changed or disabled?
Thank you in advance,
Mago
*This post is locked for comments
Hi there, this behavior is expected by design and it looks like there is no way to change or disable it.
Please refer to this article where the behavior is descripted.
Currently (May 2019) in D365 Version 1710 (9.1.0.4623) online, this happens in our organisation as well - in Sandbox & Production instances.
I don't believe it has anything to do with Security Roles of Teams / Business Units.
Are you using Sandbox or Production instance type ?
Adding license has to be done in o365 portal, security role has to be given in CRM. Just syncing users to CRM when you add the user in security group, enabling them when you assign license are automated.
Unfortunately this assignment of security role to CRM user when you assign a Dynamics 365 license in o365 admin center is not automated.
[View:https://docs.microsoft.com/en-us/dynamics365/customer-engagement/admin/create-users-assign-online-security-roles]
May be you can try post create plugin on systemuser entity (I never tried that) to set default security role.
Thanks Arun, you are correct that this is used to access Customer service hub, but I don't think this is the case.
We found out that a some users are not assigned with this sec role
Is there a way from office 365 admin when creating a new user to assign by default a Sec Role?
This security role is mandatory for accessing Customer service hub (Interactive service hub). May be MS made this mandate to avoid confusion.
I am seeing this on brand new vanilla V9 Instances as well.
Hi Goutam,
Thank you, As per checking, the default team of the root business unit does not have the Customer Service app access role assigned to it.
Also currently this default team of the root BU is the only team the user belongs to.
Regards,
Mago
Hi ,
As you may be aware there is a team for every business unit including the root business unit and when you add a new user it automatically becomes a member of this team. So by applying a security role to the root business unit team every user will have this role and I am suspecting that you have applied the Customer Service app access role to the team of root business unit.
You need to remove the roles Customer Service app access from the team of root BU and try to create new user.
Hi Adrian,
Thanks, I'm assuming you are referring if there are any sec roles assigned to the team of the user?
The new user is only assigned under the root business unit's default team and for our environment it does not have any sec roles assigned to it.
Thanks.
Stay up to date on forum activity by subscribing. You can also customize your in-app and email Notification settings across all subscriptions.
André Arnaud de Cal... 291,188 Super User 2024 Season 2
Martin Dráb 230,030 Most Valuable Professional
nmaenpaa 101,156