web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Microsoft Dynamics AX (Archived) / User account type corr...
Microsoft Dynamics AX (Archived)
Answered

User account type corresponding Active Directory group in new AX

(0) ShareShare
ReportReport
Posted on by Alexey Lekanov 518

Following scenario is available in AX 2012, roughly: A user record with account type "Active Directory group" is created in AX and is assigned some security roles. This record matches to an AD group in Windows so that if a user is a part of this group in Windows, he/she automatically gets the group's roles/access in AX. Looking at the RTW version of the new AX, I am unable to locate the field "Account type" when creating a new user.

Is anyone aware if similar scenario (e.g., where Active Directory group is replaced with Azure Active Directory group) will be available in the new AX in the future? The closest info I have found so far is this: "Users can also be automatically added to or removed from roles based on the Active Directory groups that they belong to." Source: https://ax.help.dynamics.com/en/wiki/role-based-security-in-microsoft-dynamics-ax/

*This post is locked for comments

I have the same question (0)
  • Community Member Profile Picture
    Community Member on at

    I have gotten as far as creating the group in Azure AD, adding Azure AD users to the group, importing the group into Dyn365FO, and assigning the group security roles in Dyn365FO (see AXUG Forum); all this parallels Windows AD groups in Dynamics AX 2012.  But when I try to login to Dyn365FO with a group member login (who has not been set up as a specific user in Dyn365FO) I get 'not allowed to login with current credentials'.  So I feel like I am missing a step and any guidance would be appreciated.

  • Alexey Lekanov Profile Picture
    Alexey Lekanov 518 on at

    Hello, Todd.

    And thanks for updating this! The thread at AXUG forum is really helpful, so it is a configuration key that has to be enabled.

    Just a theoretical assumption: Can it be that the users need to be imported to AX first in order to be able to log in to begin with, and then, even if they have only System user in D365FO, the memebership in Azure AD group will give them the permissions assosiated to the group anyway?

    I.e. logging in is controlled on individual level anyway, but the roles/access can be contolled by administering Azure AD groups. Maybe you have an opportunity to test this out?

  • Community Member Profile Picture
    Community Member on at

    I had that thought too. Importing the user who could not login via group membership as an individual user in Dyn365FO from Azure AD established a login for the user in Dyn365FO, but the user only received the System User role and company DAT default and not the roles / company associated with the group (that is, it is like adding any user).

    I have the July 2017 Update 11 (7.0.4679.35176) but am creating a new instance with a more recent version to see if that helps.  A couple of other ideas to try too and I will report back when / if I figure this out.

  • Verified answer
    Community Member Profile Picture
    Community Member on at

    A quick followup thanks to André Arnaud de Calavon:  If you administer the users and groups in Office 365 Admin portal rather than thru Azure Active Directory (Azure Portal or Azure PowerShell) this all works as expected, at least for members of the Azure AD / Office 365 domain. See this forum thread for details.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Congratulations to the November Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > 🔒一 Microsoft Dynamics AX (Archived)

#1
Martin Dráb Profile Picture

Martin Dráb 4 Most Valuable Professional

#1
Priya_K Profile Picture

Priya_K 4

#3
MyDynamicsNAV Profile Picture

MyDynamicsNAV 2

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans