Skip to main content

Notifications

Small and medium business | Business Central, N...
Suggested answer

Business Central management without Delegated Admin Permissions

Posted on by 98

Our customer is using Dynamics 365 Business Central with Azure Active Directory integration without the CSP Partner having delegated Azure Active Directory admin privileges. This was by design to adhere to the customer's Cyber Security Policy. As a result, the Partner doesn't have Global Admin access into the customer’s Azure AD.

As well, the customer is unwilling to provide Dynamics 365 Admin privileges since they have Dynamics 365 applications (e.g. CRM) unrelated to Business Central that they don’t want the Partner administering the customer’s Azure AD.

When sending the reseller invitation there is an option to opt out of requesting Global Admin permissions. Yet, we still need access in to the system to create the Prod/Sandbox environments, setup the companies, chart of accounts, G/L, etc. not to mention end users and security.  What are the alternatives to be able to provide Business Central support?

  • Suggested answer
    Stefano Demiliani Profile Picture
    Stefano Demiliani 37,162 Most Valuable Professional on at
    RE: Business Central management without Delegated Admin Permissions

    The following users are authorized to access the Business Central administration center:

    - Internal tenant administrators

    - Admin agent

    - Helpdesk agent

    Internal administrators are users who are assigned the Global admin role or the Dynamics 365 Admin role in the Microsoft 365 admin center of the tenant. The other two roles are for delegated admins.

    Delegated admins is normally the suggested way to provide support to a customer (you don't require a license in this case).

  • Suggested answer
    JAngle Profile Picture
    JAngle 33,159 on at
    RE: Business Central management without Delegated Admin Permissions

    No that is a delegated admin only activity. In the case where that cannot be issued the responsibility of any of the features in the admin console fall on the internal resources. It has to be a caveat of the scenario as there is no way around it. For now the most you will get is docs.microsoft.com/.../itpro-introduction-to-automation-apis

    Perhaps in the future some more commands will exist but I doubt it will be outside of the delegated admin privilege.

  • John Oberlin Profile Picture
    John Oberlin 98 on at
    RE: Business Central management without Delegated Admin Permissions

    So, if I had a BC license I'd be able to go into the Business Central admin center?  Would I also be able to create the Prod/Sandbox environments, and create the companies?

  • Suggested answer
    JAngle Profile Picture
    JAngle 33,159 on at
    RE: Business Central management without Delegated Admin Permissions

    In this scenario it is common and a valid experience if an essential or premium license is assigned to a dedicated user account.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

December Spotlight Star - Muhammad Affan

Congratulations to a top community star!

Top 10 leaders for November!

Congratulations to our November super stars!

Community AMA December 12th

Join us as we continue to demystify the Dynamics 365 Contact Center

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,240 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,149 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans