Hi guys,
Is there a way to prevent users accessing the web api (https://{dynamicsCRMNAME}.crm5.dynamics.com/api/data/v8.2/accounts) without doing it in the security role?
Some of the users are accessing the data using Web API and client doesn't want that.
*This post is locked for comments
Hi JZ,
Did you find a solution as I'm also trying to restrict users to use API or Tools like PowerBI to read data from contact Entity.
Microsoft should provide a way to control who can connect to Dynamics using API.
Thanks
Jag
If this is more of a security concern, then you have to limit the CRM accessibility outside domain network & devices, PowerBI licensing, disable Single sign on or O365 level PowerBI accessibility.
If you want your users to reach IT for such requirement then expectation has to be set in company level.
Anyway I guess you have controlled Export to excel privilege for their roles, and the security role is tight enough for them to see only what they are supposed to see.
Reporting/exporting data drives user adoption, if we limit it may have negative impact. Otherwise you can revoke their access to CRM system by monitoring the user read audit via api and give them warnings.
Ahh.. valid concern. Now I am also interested if there is any way to achieve this. Post it here if you find anything :)
Hi Ravi,
Our client doesn't want their data to be exported. Users are trying to connect to WebApi thru PowerBI and from there, they can easily export their data and client doesn't want that.
Let me know if your thoughts. Thanks! :)
Hi,
No, if the users are authenticated & authorized then they can access web api. What's the issue if users are accessing the records through web api?
Hope this helps.
Stay up to date on forum activity by subscribing. You can also customize your in-app and email Notification settings across all subscriptions.
André Arnaud de Cal... 291,253 Super User 2024 Season 2
Martin Dráb 230,188 Most Valuable Professional
nmaenpaa 101,156