Security Roles

(1) Share

Report

Posted on by MinotaurGB

I have a question regarding applying security roles to Business Units.

When you create or copy a new security role on a business unit, does that mean that the role is available to the business unit, but the role still needs to be applied to a user or team under the business unit to become active/effective ?

We have a root BU which has 195 roles, but they only become effective/active when you assign them to a team or user.

I have the same question (0)

All responses (4)

Answers (1)

Suggested answer

Leah Ju Microsoft Employee on at

Like (0)

Report

Hi Partner,

What do you understand by 'become active/effective'?

Once the security role has been created it is ready to use and does not require a separate activation step.

You said: but they only become effective/active when you assign them to a team or user.

Security roles is used to assigned to user/team and user need roles to access data, so they are separate entities but require each other for their use.

1)Security roles define how different users access different types of records, it contains some associated privileges to be configured.

https://learn.microsoft.com/en-us/power-platform/admin/security-roles-privileges

2)And users need be assigned security roles to get access to Dynamics records.

https://learn.microsoft.com/en-us/power-platform/admin/assign-security-roles

I hope you can verify my answer if it helps you! If you have any questions, please feel free to contact me.
Regards,
Leah

Was this reply helpful? Yes No
MinotaurGB 16 on at

Like (0)

Report
Hi ,

Thanks for the reply!

What I mean is if a role is created at the BU level, the new role still needs to be applied to a user or team for the role permissions/access to be in effect.

Also when creating a Security role at the BU level the security role is available only for that Business unit and all BU below that ?

Edited: I saw this on the Microsoft documentation site, not sure why this did not register before.... for the new created security role permissions to take affect it needs to be applied to the BU default team....makes sense now :-)

You can assign a security role to the business unit's default team. This is done to simplify security role management where all your business unit team members can share the same data access.

I hope the above make sense.

Was this reply helpful? Yes No
Verified answer

Leah Ju Microsoft Employee on at

Like (0)

Report

Hi Partner,

1.What I mean is if a role is created at the BU level, the new role still needs to be applied to a user or team for the role permissions/access to be in effect.

Yes.

--As I said before, security roles are used interdependently with users and teams, or as you understand it, Permissions for security roles show effects when assigned to a specific user or team.

--If the role is not assigned to a team or user, it is a static record.

2.Also when creating a Security role at the BU level the security role is available only for that Business unit and all BU below that ?

Yes.

If you create one new role in the parent BU, other new roles with same name and privileges will be created automatically in it's child BU.

But not vice versa.

I hope you can verify my answer if it helps you! If you have any questions, please feel free to contact me.
Regards,
Leah

Was this reply helpful? Yes No
Leah Ju Microsoft Employee on at

Like (0)

Report

Hi Partner,

Has the issue been resolved?

Have there been any updates? Please feel free to ask me any questions you may have!
If it has been resolved, can you mark the response as an answer?

Was this reply helpful? Yes No