Answered

Security configuration migration between environments

(0) Share

Report

Posted on by Community Member

Hi, Can anyone suggest the best practice to migrate the Security configurations between two different D365O environments and the functionality available in D365O for exporting and importing security configurations.

*This post is locked for comments

I have the same question (0)

All responses (5)

Answers (1)

Sort by

Verified answer

André Arnaud de Cal... 306,118 Super User 2026 Season 1 on at

Like
a
(0)

Report
Copy link

Link copied!

Hi,

The security configuration export and import is related to runtime changes. If you have changes done in Visual Studio, the changes will be part of a deployment.

If you are changing/adding roles or other security artifacts, the changes are kept in the database for runtime security overrides. These changes can be done in a separate environment like DEV/TEST or a staging first. Then you are able to test the security before importing/applying it in a live environment. Note that all changes to security artifacts are logged in D365, so changing, reverting, changing again in a live environment will be very confusing for auditors and should prevented.

The security metadata which will be exported from the security configuration form are related to roles, duties and privileges only. No user/role assignments are part of this package.

Was this reply helpful? Yes No
Community Member on at

Like
a
(0)

Report
Copy link

Link copied!

Hi Andre,

Thanks for the reply, I have below queries.

The security metadata which will be exported from the security configuration form includes only the added or modified roles, duties and privileges Or it will export entire out of the box roles, duties, privileges along with the changes?

How can I export the user/role assignments along with security metadata from one D365O env and import in to another D365O env?

Kind Regards,

Manikandan

Was this reply helpful? Yes No
André Arnaud de Cal... 306,118 Super User 2026 Season 1 on at

Like
a
(0)

Report
Copy link

Link copied!

Hi Manikandan,

The export from the security administration form is only taking the database changes. So all other standard roles and customizations done in Visual Studio are being deployed with software packages.

The users can be exported using the Data entity "User information".

The user/role assignment can be migrated using the "Security user role association" entity.

If you have organization assignments as well on the security, you also need to use the entity "System security user role organization".

Was this reply helpful? Yes No
Community Member on at

Like
a
(0)

Report
Copy link

Link copied!

Thanks Andre.

Was this reply helpful? Yes No
Martin Dráb 239,932 Most Valuable Professional on at

Like
a
(0)

Report
Copy link

Link copied!

If your question has been answered, please close the thread by marking the reply (replies) that answered it. Notice Did this answer your question? beside every reply.

Was this reply helpful? Yes No