web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

Community site session details

Community site session details

Session Id :
Small and medium business | Business Central, N...
Suggested Answer

New Super users

(5) ShareShare
ReportReport
Posted on by 12
New Super users are created automatically in D365 BC and there are no logs. This occurred after  v25 upgrades and Office Global Admins are now Super Admin in D365. Very strange and very concerning for Auditors.
I have the same question (0)
  • Suggested answer
    Mansi Soni Profile Picture
    8,907 Super User 2025 Season 2 on at

    Yes, after the v25 upgrade of Business Central, Office 365 Global Admins are automatically assigned Super User roles in BC. While this ensures administrative access, it’s concerning from an audit and security perspective since there are no logs tracking these role assignments.

    To manage this:

    1. Check and restrict admin access in Microsoft Entra ID (formerly Azure AD).

    2. Manually remove Super User roles in Business Central if unnecessary.

    3. Enable security auditing to track any permission changes going forward.

    Also find attached resources for reference
    https://learn.microsoft.com/en-us/dynamics365/business-central/ui-how-users-permissions
    https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/

     
  • Ramesh Kumar Profile Picture
    7,527 Super User 2025 Season 2 on at
    Hi,
     
    The Business Central team made this for universal admin control for M365/Dynamics 365 Ecosystem.  know that in most organizations, the Business Central admin is also the M365 admin. However, you can remove it manually, and the Business Central documentation will be helpful for your audits.
     
    Thanks
    Ramesh
     
    If this was helpful, please check the "Does this answer your question?" box and mark it as verified.
  • Suggested answer
    YUN ZHU Profile Picture
    95,548 Super User 2025 Season 2 on at
    You can revoke the Global Admin role of these users in the M365 admin center, or you can only clear it manually in BC.
     
    Thanks.
    ZHU
  • Suggested answer
    Jainam M. Kothari Profile Picture
    15,639 Super User 2025 Season 2 on at
    Hello,
     
    Yes i do Agree with Yun Zhu.
  • Suggested answer
    Khushbu Rajvi. Profile Picture
    20,439 Super User 2025 Season 2 on at
  • Vahid Ghafarpour Profile Picture
    12,116 Super User 2025 Season 2 on at
    If any of the responses helped resolve your issue, please take a moment to mark the best answer. This helps others in the community quickly find solutions to similar problems.

    To do this, simply click the "Does this answer your question?" button on the most helpful response and like the helpful posts. If your issue is still unresolved, feel free to provide more details so the community can assist further!

    Thanks for being an active part of the Dynamics 365 Community! 😊

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Leaderboard > Small and medium business | Business Central, NAV, RMS

#1
OussamaSabbouh Profile Picture

OussamaSabbouh 3,151

#2
Jainam M. Kothari Profile Picture

Jainam M. Kothari 1,443 Super User 2025 Season 2

#3
YUN ZHU Profile Picture

YUN ZHU 1,092 Super User 2025 Season 2

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans