I am wondering how access for all users can be granted globally to an environment in D365.
Our ITSM tool is based on D365 and resp. to make things easy we want to have access to it via teams not only with browser. The problem is with the rights.
If a user does not have a role he doesnt have access, but if he is assigned with some kind of role - let`s say "Basic user" he can see the environment from the drop down and resp connect to it (see screenshot),
but the problem is i don`t see how a role can be distributed to all users at once not to click one by one.
In the group-based choice i see only M365 teams group where we dont have all users.
Is there a global setting on the environments which can allow that?
You could add the "Basic" security role to the Root business unit team. The permissions would then be inherited by anyone who belongs to that team, which should include all licensed users. If I'm understanding your requirement properly, that might be a decent approach. Just a word of warning, I've found that there are some random and weird permissions that do not get inherited from team membership, such as model driven app visibility (though this was an issue a few years ago, not sure if that's been addressed).
The other option would be to create a Power Automate flow. You can trigger it on a user becoming 'Enabled' in an environment and use the Dataverse action 'Associate Records' to link the user to the 'Basic' security role that way.
Hope this helps, and best of luck!
Was this reply helpful?YesNo
Under review
Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.