Finance | Project Operations, Human Resources, ...

Restricting Access to Specific OData Query/API

(1) Share

Report

Posted on by MP-30052031-0

I am working on a project which requires a 3rd party to access specific entities in D365.

I wanted to know if access could be restricted to grant read-only access to specific calls e.g. VendorInvoiceHeader (read access invoice postings), Vendors (to access Vendor Master records) - as opposed to granting access to all entities D365 provides - which would be a security concern.

Any input would be appreciated.

I have the same question (0)

All responses (2)

Answers (0)

Suggested answer

Martin Dráb 237,990 Most Valuable Professional on at

Like (1)

Report

Yes, it's supported by role-based security.

There should already be a privilege with a read-only access to the entity, therefore you want to make sure that the user has a role with this privilege (and not any privilege that grants a full access to the entity).

Was this reply helpful? Yes No
Suggested answer

Anthony Blake 2,963 Super User 2025 Season 2 on at

Like (0)

Report

The security (Authorisation) is tied to the user you associate with the Azure App Id in System Admin-> Setup -> Microsoft Entra ID applications:

Was this reply helpful? Yes No