Can we segregate Azure Administrative Roles on D365 instance level?

(0) Share

Report

Posted on by LorencKoka

ALM best practices is to have in a single D365 Azure Directory/ AAD Tenant for all non-production and production instances for a single development and deployment pipeline.

Azure administrative roles act on tenant level horizontally to all instances.

In scenarios where delivery and production support teams are separated for compliance reasons, how can we segregate Azure Administrative roles on instance level?

The delivery team admins should not have admin rights on production instances, users and security groups and vice versa production instances admins should not have admin rights for pre-production (UAT performance testing) and non-production instances.

Categories:

All responses (2)

Answers (0)

LorencKoka 31 on at

Like (0)

Report

RE: Can we segregate Azure Administrative Roles on D365 instance level?

Thanks Johnny,

+1 vote :)
Johnny Gong 6,482 on at

Like (1)

Report

RE: Can we segregate Azure Administrative Roles on D365 instance level?

Good dasy Lorenc,

Currently this is still not support to separate D365 Instances for management like above segregate Azure Administrative roles on instance level.

As there's user, system administrator and global administrator role in Admin Center for instance management. I would suggest to raise this requirement in Idea Forum for following up.

I have raised one Idea which waits futher investigation : https://experience.dynamics.com/ideas/idea/?ideaid=97af373d-15ad-e911-b083-0003ff6889b5

Thanks.

Regards

Johnny