As the title says, I want to understand why the supported account types need to be 'Accounts in any organisational directory' when leads get created automatically within Dynamics 365 CRM during configuration on the Microsoft Partner Center > Lead configuration.
I don't want to overextend the permissions required as if this can work with accounts in just my organisational directory, it would be best. This is the first time I have registered an app and gone through this process, but we are shifting from the O365 authentication to Entra Identification Authentication.
From my understanding, it would allow these third-party user accounts that create leads by impersonating an application user created on our side to create the leads within our CRM; however, as it's using an internal account on our side, I want to ensure my understanding is correct.
The guide I am referring to is as below: