Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Dynamics 365 Community / Forums / Business Central forum / Business Central manag...
Business Central forum
Suggested answer

Business Central management without Delegated Admin Permissions

(0) ShareShare
ReportReport
Posted on by John Oberlin 89

Our customer is using Dynamics 365 Business Central with Azure Active Directory integration without the CSP Partner having delegated Azure Active Directory admin privileges. This was by design to adhere to the customer's Cyber Security Policy. As a result, the Partner doesn't have Global Admin access into the customer’s Azure AD.

As well, the customer is unwilling to provide Dynamics 365 Admin privileges since they have Dynamics 365 applications (e.g. CRM) unrelated to Business Central that they don’t want the Partner administering the customer’s Azure AD.

When sending the reseller invitation there is an option to opt out of requesting Global Admin permissions. Yet, we still need access in to the system to create the Prod/Sandbox environments, setup the companies, chart of accounts, G/L, etc. not to mention end users and security.  What are the alternatives to be able to provide Business Central support?

Categories:
Other
  • Suggested answer
    Stefano Demiliani Profile Picture
    Stefano Demiliani 37,160 on at
    RE: Business Central management without Delegated Admin Permissions

    The following users are authorized to access the Business Central administration center:

    - Internal tenant administrators

    - Admin agent

    - Helpdesk agent

    Internal administrators are users who are assigned the Global admin role or the Dynamics 365 Admin role in the Microsoft 365 admin center of the tenant. The other two roles are for delegated admins.

    Delegated admins is normally the suggested way to provide support to a customer (you don't require a license in this case).

  • Suggested answer
    JAngle Profile Picture
    JAngle 33,141 on at
    RE: Business Central management without Delegated Admin Permissions

    No that is a delegated admin only activity. In the case where that cannot be issued the responsibility of any of the features in the admin console fall on the internal resources. It has to be a caveat of the scenario as there is no way around it. For now the most you will get is docs.microsoft.com/.../itpro-introduction-to-automation-apis

    Perhaps in the future some more commands will exist but I doubt it will be outside of the delegated admin privilege.

  • John Oberlin Profile Picture
    John Oberlin 89 on at
    RE: Business Central management without Delegated Admin Permissions

    So, if I had a BC license I'd be able to go into the Business Central admin center?  Would I also be able to create the Prod/Sandbox environments, and create the companies?

  • Suggested answer
    JAngle Profile Picture
    JAngle 33,141 on at
    RE: Business Central management without Delegated Admin Permissions

    In this scenario it is common and a valid experience if an essential or premium license is assigned to a dedicated user account.

Helpful resources

Quick Links

Dynamics 365 Community Update – Sep 9th

Welcome to the next edition of the Community Platform Update. This is a weekly…

Announcing Our 2024 Season 2 Super Users!

A new season of Super Users has arrived, and we are so grateful for the daily…

Community Spotlight for September 2024

Kudos to Mohana Yadav!

more Community News

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 290,263 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 228,112 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,148

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans