Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Finance | Project Operations, Human Resources, ... / How to segregate Devel...
Finance | Project Operations, Human Resources, ...
Suggested answer

How to segregate Development and Deployment role in LCS

(1) ShareShare
ReportReport
Posted on by sohaiby 7
Hi. 
We are using D365 Finance and Operations (Cloud deployment). We have an audit requirement where we need to segregate the development and deployment roles. In LCS Project settings, the Environment manager (Project security role) gives you access to manage all the environments, including the DevBox, and also to publish deployable packages in the production environment.
Is there a way to create separate roles for development and deployment, so that the developer doesn't have access to deploy the package, and only has access to manage the DevBox and Sandbox environment? Alternatively, can there be an approval process for the deployable package, so that it needs to be approved by another user before it could be published to the production environment?
Thanks.
  • Suggested answer
    DD-10121038-0 Profile Picture
    DD-10121038-0 2 on at
    How to segregate Development and Deployment role in LCS
    Give the Developers the Project security role as "Operations User" and Implementation Role as "Technical Consultant", This should help with your Audit passed. 
     
    thanks
    Dilliraj
  • André Arnaud de Calavon Profile Picture
    André Arnaud de Cal... 293,274 Super User 2025 Season 1 on at
    How to segregate Development and Deployment role in LCS
    Hi Sohaiby,
     
    You have a follow-up question where the developer does have environment manager access on the LCS project and should not start the deployment. In this case, it is not possible to stop them from deploying a deployable package. Note that LCS will be deprecated and all environment access will be managed in the Power Platform admin center in the future. We should check if development and deployment can be separated in a better way. I can bring your question to Microsoft. 
     
    For now, the only option would be taking away the LCS role from the developers as mentioned below. 
  • sohaiby Profile Picture
    sohaiby 7 on at
    How to segregate Development and Deployment role in LCS
    Hi MuthukumaranAX, Thanks for your response.
    Is there a way that the Developer (with Environment manager role) who deployed the package to Sandbox won't be able to Mark it as Release Candidate, and only a different user (with either Environment manager or Project Owner role) can do it? This will act as an extra level of security and will pass our audit requirement.
  • sohaiby Profile Picture
    sohaiby 7 on at
    How to segregate Development and Deployment role in LCS
    @Anthony Blake Thank you for your answer. Taking away the complete LCS access would mean that the Developer won't be able to manage sandbox, apply updates and manage LCS settings. Our requirement is to only segregate the deployment to production role, while they can continue to manage the rest of the LCS settings.
    Is there a package approval workflow in LCS (similar to the x++ custom script deployment) that could be enabled?
  • Suggested answer
    MuthukumaranAX Profile Picture
    MuthukumaranAX 2,901 on at
    How to segregate Development and Deployment role in LCS
    You can't custom role in LCS project, please refer the below link and chose the right role that suits your requirement.
     
    Secondly,  you have marked the package as "Release candidate" that indicate that the package is ready for production instance.
  • Suggested answer
    Anthony Blake Profile Picture
    Anthony Blake 2,343 Super User 2025 Season 1 on at
    How to segregate Development and Deployment role in LCS
    There's no way to setup roles in LCS that aren't out of the box, its pretty limited.
     
    Your developers however don't actually need access to LCS at all if that's a problem, your environment managers could provide them with RDP & credentials from LCS.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Daivat Vartak – Community Spotlight

We are honored to recognize Daivat Vartak as our March 2025 Community…

Announcing Our 2025 Season 1 Super Users!

A new season of Super Users has arrived, and we are so grateful for the daily…

Kudos to the February Top 10 Community Stars!

Thanks for all your good work in the Community!

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 293,274 Super User 2025 Season 1

#2
Martin Dráb Profile Picture

Martin Dráb 231,939 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156 Moderator

Leaderboard

Featured topics

End-of-life Announcement for Microsoft Dynamics GP

Product updates

Dynamics 365 release plans