security

(3) Share

Report

Posted on by SW-27091219-0

hello everyone, regarding security and roles configuration in D365 FO, the requirement is to block access to Excel add-ins for certain users (update,delete , import data )and only allow the export option. How can I achieve this? Which menus/tables/data entities should I restrict access to?

thanks.

I have the same question (0)

All responses (4)

Answers (1)

Suggested answer

Waed Ayyad 9,089 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!

Hi,

In general, based on your requirement, you want to restrict data operations, so you should use/create privileges and set it to ready only and connect it with security roles.

For certain form you check the roles associated to without VS :

https://community.dynamics.com/blogs/post/?postid=8ec960a1-b125-4342-adb5-d1f005528023

To read more about security on D365 FO:

https://dynamics365musings.com/security-in-d365/

Thanks,
Waed Ayyad

If this helped, please mark it as "Verified" for others facing the same issue

Was this reply helpful? Yes No
SW-27091219-0 48 on at

Like (0)

Report
Copy link

Link copied!

Thank you for your response. While I am familiar with configuring security and controlling access using privileges, I am seeking a more detailed solution for this specific requirement. Given that I must not alter standard permissions and need to block access to add-ins excel while still allowing access to the export option.

if a block access to these menus "ExportToExcelStaticOpenFileAction" and "ExportToExcelExportForm" both open in excel and export will be blocked for the users

Was this reply helpful? Yes No
Verified answer

André Arnaud de Cal... 303,691 Super User 2026 Season 1 on at

Like (1)

Report
Copy link

Link copied!

Hi,

You should start thinking that the security in Dynamics 365 F&O is pessimistic, meaning users will not have permissions unless granted via privileges, duties, and security roles. Instead of blocking, you should think of not providing certain access.

All data entities are created with two privileges. One for maintain access permissions and one for view permissions. If you ensure you will only add the privileges for the view permissions, the users can't publish the changes.

E.g. For the CustCustomerEntityV2, there are two privileges: CustCustomerEntityMaintain and CustCustomerEntityView. Ensure that the privilege CustCustomerEntityMaintain is not part of the security roles for the users that should only have read access via the Excel add-in.

Was this reply helpful? Yes No
Waed Ayyad 9,089 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!

Hi,

Is your issue resolved? If yes, mark the answers that helped you as verified.

Thanks

Waed Ayyad

Was this reply helpful? Yes No