Announcements
I am trying to sync Active Directory users with CRM Online Business Units. I want to use AD security groups (or similar) to organize and manage users into their correct business units and then utilize DirSync so that those users and relationships sync to CRM Online Business Units. This will allow me to manage the user -> Business Unit relationship in one place (AD). We use an on-premise ADFS server for SSO with Office 365.
I read this article and was able to assign an AD security group as the default group for our CRM Sandbox instance but this wasn't enough. Can anyone help? Many thanks.
*This post is locked for comments
Hi - it is a shame that you can't sync these two however the two models are very different that I understand why they are not linked. You will have to manage the two separately unless you create your own custom program.
Hope this helps
Thanks Scott, that's a shame as AD security groups sync nicely to o365 - we can link an AD security group with a SharePoint group so I thought the same could be done with CRM Business Units.
So does this mean we need to manage our user to business unit relationships in multiple places?
Hi,
There is no out of the box for syncing business units from AD to CRM business units - the only link is the AD Group to CRM org user assignment as you have already found.
You could always create a custom sync program that uses the SDK to assign the user's business unit and Role depending on an AD property/group. You must remember that if you change a user's business unit, then all of their assigned roles will need re-assigning.
Hope this help,
André Arnaud de Cal...
294,079
Super User 2025 Season 1
Martin Dráb
232,860
Most Valuable Professional
nmaenpaa
101,158
Moderator