Microsoft Dynamics 365 | Integration, Dataverse...

#CDSUserManagement User is assigning Sys Admin to other Dynamics Users

(0) Share

Report

Posted on by Priyesh

7,396 User Group Leader

Hi All,

I'm recently facing an issue on an environment wherein the user #CDSUserManagement is automatically assigning System Administrator security role to other Dynamics 365 CRM users.
This user is not governed by anyone and exists since the beginning. Not sure that this is for.

But every few days, it doesn't assign a System Administrator security role to all other users. I have to keep monitoring this every 5-6 days.

Kindly advise!

Thanks in advance!!

I have the same question (1)

All responses (6)

Answers (0)

Priyesh 7,396 User Group Leader on at

Like (0)

Report

I found that these are the AzureAD User account used by Microsoft sync users to Dataverse as the documentation says the below description - "To provision and synchronize users into Dataverse from Active Directory"

docs.microsoft.com/.../system-application-users

However, this is making everyone else a Sys Admin when we remove them explicitly.

Other users are Global Admins but we don't want them to be Sys Admins in Dynamics. This wasn't the case before.

Any thoughts on how I can prevent this from happening.

Alternate solutions are also appreciated.

Thanks!!

Was this reply helpful? Yes No
Suggested answer

Ioannis Vrasenikis on at

Like (0)

Report

Hi Priyesh,

Users with special Office roles (Global Administrator, D365 Service Administrator, Power Platform Service Administrator) will get assigned System administrator role by user sync.

This is currently expected behavior and there are internal discussions to re-design this behavior. There is no ETA which can be shared at this moment and what the indented change in this process will be, as this is still being discussed.

If you would like to stay updated on this, please follow our documentation & release updates. If you have other considerations or are facing a big business impact because of that, please raise a support request to share your feedback.

Was this reply helpful? Yes No
Priyesh 7,396 User Group Leader on at

Like (0)

Report

Hi Ioannis Vrasenikis,

Thanks for your response back then. However, this continues to be a big issue for the organization as exposing business critical data to their internal issues have tremendous implications.

Can you let us know if you have an ETA on this? Alternatively, are their any workarounds for the same? I tried to have Flows/logic on reverting this operation within CRM but the solution isn't reliable and has fall-throughs.

Any advise/direction would certainly help!

Thanks in advance.

Was this reply helpful? Yes No
Ioannis Vrasenikis on at

Like (0)

Report

Hi Priyesh,

I am sorry to hear that you are still impacted by this.

As stated on my last comment, I advise to raise a support request to share your impact so that we can track that and provide you a more formal update.

Thanks

Was this reply helpful? Yes No
Priyesh 7,396 User Group Leader on at

Like (0)

Report

Thanks Ioannis,

Yes, we did raise a support request and they said that it's been worked out internally but don't have an ETA on it.

Can you help how I can get a more precise answer to set expectations to customers accordingly?

Thank you for your help so far!

Was this reply helpful? Yes No
Ioannis Vrasenikis on at

Like (0)

Report

Hi Priyesh,

I am afraid I won't be able to share an ETA at this moment.

I would suggest to reach back via the raised support request or raise a new one, in order to request for a formal update regarding an ETA.

Was this reply helpful? Yes No