You’re offline. This is a read only version of the page.
Hi All,
I'm recently facing an issue on an environment wherein the user #CDSUserManagement is automatically assigning System Administrator security role to other Dynamics 365 CRM users.
This user is not governed by anyone and exists since the beginning. Not sure that this is for.
But every few days, it doesn't assign a System Administrator security role to all other users. I have to keep monitoring this every 5-6 days.
Kindly advise!
Thanks in advance!!
Hi Priyesh,
I am afraid I won't be able to share an ETA at this moment.
I would suggest to reach back via the raised support request or raise a new one, in order to request for a formal update regarding an ETA.
Thanks Ioannis,
Yes, we did raise a support request and they said that it's been worked out internally but don't have an ETA on it.
Can you help how I can get a more precise answer to set expectations to customers accordingly?
Thank you for your help so far!
Hi Priyesh,
I am sorry to hear that you are still impacted by this.
As stated on my last comment, I advise to raise a support request to share your impact so that we can track that and provide you a more formal update.
Thanks
Thanks for your response back then. However, this continues to be a big issue for the organization as exposing business critical data to their internal issues have tremendous implications.
Can you let us know if you have an ETA on this? Alternatively, are their any workarounds for the same? I tried to have Flows/logic on reverting this operation within CRM but the solution isn't reliable and has fall-throughs.
Any advise/direction would certainly help!
Thanks in advance.
Hi Priyesh,
Users with special Office roles (Global Administrator, D365 Service Administrator, Power Platform Service Administrator) will get assigned System administrator role by user sync.
This is currently expected behavior and there are internal discussions to re-design this behavior. There is no ETA which can be shared at this moment and what the indented change in this process will be, as this is still being discussed.
If you would like to stay updated on this, please follow our documentation & release updates. If you have other considerations or are facing a big business impact because of that, please raise a support request to share your feedback.
I found that these are the AzureAD User account used by Microsoft sync users to Dataverse as the documentation says the below description - "To provision and synchronize users into Dataverse from Active Directory"
docs.microsoft.com/.../system-application-users
However, this is making everyone else a Sys Admin when we remove them explicitly.
Other users are Global Admins but we don't want them to be Sys Admins in Dynamics. This wasn't the case before.
Any thoughts on how I can prevent this from happening.
Alternate solutions are also appreciated.
Thanks!!
Stay up to date on forum activity by subscribing. You can also customize your in-app and email Notification settings across all subscriptions.
#1
André Arnaud de Cal...
291,240
Super User 2024 Season 2
#2
Martin Dráb
230,149
Most Valuable Professional
#3
nmaenpaa
101,156
Share
Report
All responses (
Answers (