Our customer is using Dynamics 365 Business Central with Azure Active Directory integration without the CSP Partner having delegated Azure Active Directory admin privileges. This was by design to adhere to the customer's Cyber Security Policy. As a result, the Partner doesn't have Global Admin access into the customer’s Azure AD.
As well, the customer is unwilling to provide Dynamics 365 Admin privileges since they have Dynamics 365 applications (e.g. CRM) unrelated to Business Central that they don’t want the Partner administering the customer’s Azure AD.
When sending the reseller invitation there is an option to opt out of requesting Global Admin permissions. Yet, we still need access in to the system to create the Prod/Sandbox environments, setup the companies, chart of accounts, G/L, etc. not to mention end users and security. What are the alternatives to be able to provide Business Central support?
