
Hi All,
We are using Dynamics 365 online in Gov Cloud. We have an Entity with a Business Process Flow that has multiple stages. Each stage is owned by a team (Owner Team) and there are use cases when 2 or more different stages are owned by the same team. For Example, Stage 1 is owned by Team A, Stage 2 is owned by Team B, Stage 3 is Owned by Team A and so on. All our users have a Team Member license and are part of a single team. We use SharePoint Online for Document Management and Versioning. Each Dynamics record has one or more word documents in its SharePoint location, our requirement is when a record is in Stage 1, only Team A should be able to access the document (from Dynamics 365 document grid, directly through SharePoint URL, MS word Application or by any other means).
We are planning to achieve this functionality by dynamically controlling the SharePoint Security, that is, break the security inheritance from the site level and provide the access to users (dynamically) at the folder level based on the Dynamics 365 record stage. But we are facing lots of challenges, here are our questions:
FYI, we don't have Global Admin Privilege/Admin Privileges in our tenant, we are admins of our Dynamics 365 Instances and SharePoint sites. Kindly provide suggestions, any assistance would be greatly appreciated. Thanks in advance!