RE: Role that can handle access in CRM
Hi Filippa,
Access to D365 is handled already by default.
1) Users that have O365 Global Administrator or Power Platform Administrator Role have assigned in admin.microsoft.com have access to the environments
2) As a normal user, you need a Dynamics 365 or Power Platform license assigned to access environments
3) which environment can be accessed can be handled by Security Groups. Therefore you can add a security group to each environment and by membership of the user to security groups, you can specify which user is allowed to access which environment.
Navigate to https://aka.ms/ppac (Power Platform Admin Center) (1), select the environment (2 ), click on edit details (4) and in the sidebar you can add a security group for this environment (5).

Clicking on save will limit the access to this specific environment only to users that are in the security group and have a license assigned.
If no security group is assigned, every user has access to this environment.
4) what the user is allowed to do in the environment is then defined by the permissions in the security roles that are assigned to the user in each environment
Best regards,
Joergen
If this description has been helpful for you, please mark as verified. Thanks