Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Dynamics 365 Community / Forums / Customer experience | Sales, Customer Insights,... / Assign Dynamics 365 an...
Customer experience | Sales, Customer Insights,...
Answered

Assign Dynamics 365 and/or Business Central to AzureAD Guest Accounts

(0) ShareShare
ReportReport
Posted on by mobileX 1,275

I have one or two basic question(s).
Is it possible to assign Dynamics 365 licenses to AzureAD Guest Accounts?
Also as I understand, Business Central is an AddOn on Dynamics 365, the same question, can a azure AD external guest user get assigned a license, not necessarily within the Guest tenant. If he can use a license assigned in his e.g. home-tenant, but he uses it in the guest tenant I'd be fine too.
What I want to avoid is that my users to get full users accounts in the guest tenant.
I found this post debajmecrm.com/.../ - is that a valid approach, and would it also apply for Business Central too?

At least technically it seems to be possible, are there eventually any limitations in terms of roles such an user can use in D365 or BC?

Screenshot-2022_2D00_07_2D00_20-090722.png

kind regards,

Dieter Tontsch

  • Suggested answer
    PerezAguiar Profile Picture
    PerezAguiar on at
    RE: Assign Dynamics 365 and/or Business Central to AzureAD Guest Accounts

    Hey!

    Usually, you don't create but "invite" the users. Therefore an email is sent to the users from the Source.com tenant

    Users from source.com will receive an email asking them to accept an invitation.  Depending on the tenant policies, this means they will be allowed to login with their credentials from Source.com tenant, but in some cases, users can choose to use the same login (name@source.com) but a different password.

    Regards,

  • mobileX Profile Picture
    mobileX 1,275 on at
    RE: Assign Dynamics 365 and/or Business Central to AzureAD Guest Accounts

    Thank you,

    one last one, what do you mean by "Please ensure the user receives the invitation email and configures the password (it's a different password from his source domain)." How is this different, won't they login with their source tenant upn/password?

  • Suggested answer
    PerezAguiar Profile Picture
    PerezAguiar on at
    RE: Assign Dynamics 365 and/or Business Central to AzureAD Guest Accounts

    Hey!

    Indeed, the guest user (on this case, from tenant source.com), can be added to the second tenant (target.com) that is the one that contains the Dynamics licenses and Environments.  From my testing, you can assign different roles (like PowerPlatform Administrator, Dynamics365 Administrator) on Azure.   Licenses must also exist on the target tenant and be assigned to them. 

    I've been able to test and confirm this on CRM but not on Business Central, although it should behave similarly.

  • mobileX Profile Picture
    mobileX 1,275 on at
    RE: Assign Dynamics 365 and/or Business Central to AzureAD Guest Accounts

    Hello,

    the links you sent me is like generic info about how to deal with Guest Users in Azure AD, I am familiar with that.

    The question was particularly related to D365 and BC vs. AzureAD guest users. Your answer is still yes, I can add guest users to my D365 or BC organization without any limitations (can they even have System Administrator?)? All I have to make sure is that respective licenses are assigned accordingly in the tenant where D365 / BC runs, right? In your words, target.com ist the tenant where my users in charge are guest and D365 is running.

    cheers,

    Dieter

  • Suggested answer
    PerezAguiar Profile Picture
    PerezAguiar on at
    RE: Assign Dynamics 365 and/or Business Central to AzureAD Guest Accounts

    Hey.

    Let's suppose you have 2 tenants, Source.com and Target.com.  You can create users on Target.com tenant from source.com.  However, Dynamics licenses have to be assigned on Target.com tenant.  This is documented on https://docs.microsoft.com/en-us/microsoft-365/admin/add-users/about-guest-users?view=o365-worldwide and https://docs.microsoft.com/en-us/azure/active-directory/external-identities/b2b-quickstart-add-guest-users-portal  as well (although your link has a nice step by step instructions).  

    Please ensure the user receives the invitation email and configures the password (it's a different password from his source domain).

    Regards,

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

December Spotlight Star - Muhammad Affan

Congratulations to a top community star!

Top 10 leaders for November!

Congratulations to our November super stars!

Tips for Writing Effective Suggested Answers

Best practices for providing successful forum answers ✍️

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,280 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,235 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans