Skip to main content

Notifications

Microsoft Dynamics CRM (Archived)

Dynamics CRM Online: How to prevent users access web api?

Posted on by 185

Hi guys,

Is there a way to prevent users accessing the web api (https://{dynamicsCRMNAME}.crm5.dynamics.com/api/data/v8.2/accounts) without doing it in the security role?

Some of the users are accessing the data using Web API and client doesn't want that.

*This post is locked for comments

  • Jag S Profile Picture
    Jag S 210 on at
    RE: Dynamics CRM Online: How to prevent users access web api?

    Hi JZ,

    Did you find a solution as I'm also trying to restrict users to use API or Tools like PowerBI to read data from contact Entity.

    Microsoft should provide a way to control who can connect to Dynamics using API.

    Thanks

    Jag

  • Suggested answer
    Arun Vinoth Profile Picture
    Arun Vinoth 11,613 on at
    RE: Dynamics CRM Online: How to prevent users access web api?

    If this is more of a security concern, then you have to limit the CRM accessibility outside domain network & devices, PowerBI licensing, disable Single sign on or O365 level PowerBI accessibility.

    If you want your users to reach IT for such requirement then expectation has to be set in company level.

    Anyway I guess you have controlled Export to excel privilege for their roles, and the security role is tight enough for them to see only what they are supposed to see.

    Reporting/exporting data drives user adoption, if we limit it may have negative impact. Otherwise you can revoke their access to CRM system by monitoring the user read audit via api and give them warnings.

  • RaviKashyap Profile Picture
    RaviKashyap 55,410 on at
    RE: Dynamics CRM Online: How to prevent users access web api?

    Ahh.. valid concern. Now I am also interested if there is any way to achieve this. Post it here if you find anything :)

  • JZot Profile Picture
    JZot 185 on at
    RE: Dynamics CRM Online: How to prevent users access web api?

    Hi Ravi,

    Our client doesn't want their data to be exported. Users are trying to connect to WebApi thru PowerBI and from there, they can easily export their data and client doesn't want that.

    Let me know if your thoughts. Thanks! :)

  • RaviKashyap Profile Picture
    RaviKashyap 55,410 on at
    RE: Dynamics CRM Online: How to prevent users access web api?

    Hi,

    No, if the users are authenticated & authorized then they can access web api. What's the issue if users are accessing the records through web api?

    Hope this helps.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

December Spotlight Star - Muhammad Affan

Congratulations to a top community star!

Top 10 leaders for November!

Congratulations to our November super stars!

Community AMA December 12th

Join us as we continue to demystify the Dynamics 365 Contact Center

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,253 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,188 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans