Finance | Project Operations, Human Resources, ...

API Permission in Azure app registration in Azure portal for D365F&O

(3) Share

Report

Posted on by CU22111441-0

Hello,

I go through the below link for app registration in Azure portal for D365F&O.

https://www.ljdynamicswritings.com/2024/02/how-to-create-app-registration-in-azure.html?m=1

One node is there "API Permission". In the above blog, they not used anywhere.

I would like to know, is "API Permission" is mandatory to perform while do new App registration in Azure for D365F&O.

give me the though pls.

thanks!

Categories:

Dynamics 365 Finance

I have the same question (0)

All responses (5)

Answers (0)

Suggested answer

Navneeth Nagrajan 2,538 Super User 2026 Season 1 on at

Like (1)

Report
Copy link

Link copied!

Hi @CU22111441-0,

App registration is necessary for granting API Permissions, however API permissions are not mandatory for all Azure App registrations. They are crucial for application to interact with protected resources or services.

For example:

1. If you are using Graph API for emailing with Dynamics 365 Finance then you need to register the app and grant API Permissions to retrieve the application ID and secret key and for sending out emails and for reading and writing emails.

2. Authenticating users to access a set of data might not need API Permissions to be granted but could require an app registration only to retrieve the application id and secret key.

References:

https://learn.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/organization-administration/configure-email

Hope this helps. Happy to answer questions, if any.

Was this reply helpful? Yes No
CU22111441-0 on at

Like (0)

Report
Copy link

Link copied!

Thanks Navneeth,

So, if I worked on Enqueue (Import) or Dequeue (Export) process with Recurrence integeration in D365FO + Logic app, is API permission is required?

Was this reply helpful? Yes No
Suggested answer

Aymen CHELBI 586 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!

Hello,

For Enqueue (Import) and Dequeue (Export) processes using recurring integrations between D365FO and Logic Apps, adding API permissions in the Azure App Registration is not mandatory. The integration relies on the OAuth2 client credentials flow (Application ID and secret or certificate) for authentication, and D365FO validates the token based on the linked user account.

API permissions are only required if your Logic App needs to access Microsoft Graph or other Azure services (such as Key Vault or Storage). For a standard recurring integration scenario, you only need to create the App Registration, generate a secret or certificate, and associate the app with a user in D365FO who has the appropriate roles.

Best regards,

Was this reply helpful? Yes No
CU22111441-0 on at

Like (0)

Report
Copy link

Link copied!

Thanks Aymen,

As you said "API permissions are only required if your Logic App needs to access Microsoft Graph or other Azure services (such as Key Vault or Storage)."

Here storage means is it Azure blob storage?

What is Key vault?

Give me your thoughts pls. thanks!

Was this reply helpful? Yes No
André Arnaud de Cal... 303,691 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!

Hi,

You are changing the contents of your initial question. Your question is about the requirement for API permissions. That question has been answered above. In relation with Dynamics 365 authentication, this is not used. To learn about Azure Key Vault, you can also read the documentation or blogs on the internet.
Key Vault | Microsoft Azure

Was this reply helpful? Yes No