Provide restricted Dynamics 365 data access to 3rd-party user via web API

(0) Share

Report

Posted on by Community Member

Hello Community,

I have the following scenario and would appreciate some guidance if anyone could help provide some inputs.

I have a Dynamics 365 for Customer Engagement production environment. I want to provide a 3rd-party company a way to access certain data in Dynamics in real-time as a data source. The 3rd-party company is planning to connect to the Dynamics environment using this web API: https://github.com/AlexaCRM/dynamics-webapi-toolkit, and they would need the following information:

Org ID
Application ID
Secret

My understanding is the above "Org ID", "Application ID" and "Secret" are referring to that of my Dynamics production environment within Azure AD, am I correct?

And how would I set it up so that the 3rd-party company only has Read access to certain entity data in Dynamics when the connection is established for them?

Thanks!

I have the same question (0)

All responses (3)

Answers (2)

Verified answer

Jason Daraz 25 on at

Like (0)

Report

Hey D365_Eric,

Not exactly, you need to create an app registration in Azure AD, see here: docs.microsoft.com/.../walkthrough-register-app-azure-active-directory

This app registration will have the details you mentioned associated to it. You also need to grant the app registration permission to access Dynamics.

Once you have done this, you will also need to create an Application User in Dynamics, linked to this app registration using the application ID. You can then apply security roles to that Application User in Dynamics.

Hope this helps.

Jason

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Hi Jason,

Thank you very much for your inputs!

I have couple of follow-up questions if you don't mind:

- By "app registration", this does not mean that I actually have to create an "app" for the 3rd-party. It's just a registration I need to set up in Azure AD. Am I right?

- When creating a new user (for the application user) in Admin Centre, where and how would I link it to the Application ID? Am I looking at the right spot?

Thank you,

Eric

Was this reply helpful? Yes No
Verified answer

Jason Daraz 25 on at

Like (0)

Report

No you aren't creating the "app" itself, you are just registering it in Azure AD and then telling Azure AD to give any app with the generated Application ID access to Dynamics.

You will need to give the Application ID to whomever is developing the app, when they make a request to access Dynamics from their app, they will need to do so using the Application ID you have generated.

You can create an application user directly in Dynamics, go to the Settings -> Security -> Users and change the view to Application Users, then click New. Change the form to the Application User form and you should see the below:

Was this reply helpful? Yes No