Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Dynamics 365 Community / Forums / Finance | Project Operations, Human Resources, ... / Is it possible to crea...
Finance | Project Operations, Human Resources, ...
Suggested answer

Is it possible to create users and assign roles via API calls to F&O

(0) ShareShare
ReportReport
Posted on by Migi 203
After using AAD group and experiencing many difficulties, I've been wondering the possibility to create users and setup security roles via API calls to F&O. Has anyone been using this kind of solution successfully in user management?
  • André Arnaud de Calavon Profile Picture
    André Arnaud de Cal... 291,703 Super User 2024 Season 2 on at
    Is it possible to create users and assign roles via API calls to F&O
    Hi Migi,
     
    Thanks for your reply with your reasoning. Fully understand that. Are you able to work with the entities I shared in my reply below?
  • Migi Profile Picture
    Migi 203 on at
    Is it possible to create users and assign roles via API calls to F&O
    What do you mean by using auto role assign to user by to use the employee position?
     
    The main problem with Entra groups is that you can't use saved views with it. And our customer wants to use personalized views. 
    From MS learn: 
    • Publishing views to security roles doesn't consider the role assignments made to Active directory security groups."
    So that's why we're considering to remove AAD groups configuration from F&O and instead use e.g. Logic apps to create users and assign roles via odata posts. 
     
  • Suggested answer
    André Arnaud de Calavon Profile Picture
    André Arnaud de Cal... 291,703 Super User 2024 Season 2 on at
    Is it possible to create users and assign roles via API calls to F&O
    Hi Migi,
     
    There are public data entities available to manage the users and security role assignments.
     
    The entities SystemUser, SecurityUserRoleAssociation, and SecurityUserRoleOrganization can be used.
     
    Like Billur mentioned, there are also some other alternatives for assigning roles to users. If you can mention what challenges you faced and some background on the idea for using an API, we might be able to recommend a particular approach.
     
    PS. Using the Entra ID (new name for Azure AD) groups, there are indeed some caveats. I listed some of them in my blog post: How to use Azure Active Directory for managing users and security in Dynamics 365 for Finance and Operations - Dynamicspedia
     
  • BillurSamdancioglu Profile Picture
    BillurSamdancioglu 15,811 Most Valuable Professional on at
    Is it possible to create users and assign roles via API calls to F&O
    Hi,
     
    Have you considered to use auto role assign to user by to use the employee position?
    Maybe it would be easier.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Congratulations 2024 Spotlight Honorees

Kudos to all of our 2024 community stars! 🎉

Meet the Top 10 leaders for December

Congratulations to our December super stars! 🥳

Start Your Super User Journey

Join the ranks of our community heros! 🦹

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,703 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,433 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

End-of-life Announcement for Microsoft Dynamics GP

Product updates

Dynamics 365 release plans