web
You’re offline. This is a read only version of the page.
close
Skip to main content

Announcements

🚀 Season of Sharing Community Challenge Launch!
Ask A Community Pro
Introducing our New Video Series: Community Spotlight
News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Customer experience | Sales, Customer Insights,... / Assign Dynamics 365 an...
Customer experience | Sales, Customer Insights,...
Answered

Assign Dynamics 365 and/or Business Central to AzureAD Guest Accounts

(0) ShareShare
ReportReport
Posted on by mobileX 1,275

I have one or two basic question(s).
Is it possible to assign Dynamics 365 licenses to AzureAD Guest Accounts?
Also as I understand, Business Central is an AddOn on Dynamics 365, the same question, can a azure AD external guest user get assigned a license, not necessarily within the Guest tenant. If he can use a license assigned in his e.g. home-tenant, but he uses it in the guest tenant I'd be fine too.
What I want to avoid is that my users to get full users accounts in the guest tenant.
I found this post debajmecrm.com/.../ - is that a valid approach, and would it also apply for Business Central too?

At least technically it seems to be possible, are there eventually any limitations in terms of roles such an user can use in D365 or BC?

Screenshot-2022_2D00_07_2D00_20-090722.png

kind regards,

Dieter Tontsch

I have the same question (0)
  • Suggested answer
    PerezAguiar Profile Picture
    PerezAguiar Microsoft Employee on at

    Hey.

    Let's suppose you have 2 tenants, Source.com and Target.com.  You can create users on Target.com tenant from source.com.  However, Dynamics licenses have to be assigned on Target.com tenant.  This is documented on https://docs.microsoft.com/en-us/microsoft-365/admin/add-users/about-guest-users?view=o365-worldwide and https://docs.microsoft.com/en-us/azure/active-directory/external-identities/b2b-quickstart-add-guest-users-portal  as well (although your link has a nice step by step instructions).  

    Please ensure the user receives the invitation email and configures the password (it's a different password from his source domain).

    Regards,

  • mobileX Profile Picture
    mobileX 1,275 on at

    Hello,

    the links you sent me is like generic info about how to deal with Guest Users in Azure AD, I am familiar with that.

    The question was particularly related to D365 and BC vs. AzureAD guest users. Your answer is still yes, I can add guest users to my D365 or BC organization without any limitations (can they even have System Administrator?)? All I have to make sure is that respective licenses are assigned accordingly in the tenant where D365 / BC runs, right? In your words, target.com ist the tenant where my users in charge are guest and D365 is running.

    cheers,

    Dieter

  • Suggested answer
    PerezAguiar Profile Picture
    PerezAguiar Microsoft Employee on at

    Hey!

    Indeed, the guest user (on this case, from tenant source.com), can be added to the second tenant (target.com) that is the one that contains the Dynamics licenses and Environments.  From my testing, you can assign different roles (like PowerPlatform Administrator, Dynamics365 Administrator) on Azure.   Licenses must also exist on the target tenant and be assigned to them. 

    I've been able to test and confirm this on CRM but not on Business Central, although it should behave similarly.

  • mobileX Profile Picture
    mobileX 1,275 on at

    Thank you,

    one last one, what do you mean by "Please ensure the user receives the invitation email and configures the password (it's a different password from his source domain)." How is this different, won't they login with their source tenant upn/password?

  • Suggested answer
    PerezAguiar Profile Picture
    PerezAguiar Microsoft Employee on at

    Hey!

    Usually, you don't create but "invite" the users. Therefore an email is sent to the users from the Source.com tenant

    Users from source.com will receive an email asking them to accept an invitation.  Depending on the tenant policies, this means they will be allowed to login with their credentials from Source.com tenant, but in some cases, users can choose to use the same login (name@source.com) but a different password.

    Regards,

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

News and Announcements

🚀 Season of Sharing Community Challenge Launch!
Ask A Community Pro
Introducing our New Video Series: Community Spotlight

Quick Links

Season of Sharing Community Challenge Launch!

Jump in, show your community spirit, and win prizes!

Women in Power Builds Momentum

Expanding mentorship, skilling, and AI innovation

Congratulations to the May Top 10 Community Leaders

These are the community rock stars!

Leaderboard > Customer experience | Sales, Customer Insights, CRM

#1
Hamza H Profile Picture

Hamza H 142 Super User 2026 Season 1

#2
Nagaraju_Matta Profile Picture

Nagaraju_Matta 128

#3
11manish Profile Picture

11manish 119

Last 30 days Overall leaderboard

Featured topics

Hide selecting Contact for potential customer when creating quote

Product updates

Dynamics 365 release plans