Our customer is using Dynamics 365 Business Central with Azure Active Directory integration without the CSP Partner having delegated Azure Active Directory admin privileges. This was by design to adhere to the customer's Cyber Security Policy. As a result, the Partner doesn't have Global Admin access into the customer’s Azure AD.
As well, the customer is unwilling to provide Dynamics 365 Admin privileges since they have Dynamics 365 applications (e.g. CRM) unrelated to Business Central that they don’t want the Partner administering the customer’s Azure AD.
When sending the reseller invitation there is an option to opt out of requesting Global Admin permissions. Yet, we still need access in to the system to create the Prod/Sandbox environments, setup the companies, chart of accounts, G/L, etc. not to mention end users and security. What are the alternatives to be able to provide Business Central support?
The following users are authorized to access the Business Central administration center:
- Internal tenant administrators
- Admin agent
- Helpdesk agent
Internal administrators are users who are assigned the Global admin role or the Dynamics 365 Admin role in the Microsoft 365 admin center of the tenant. The other two roles are for delegated admins.
Delegated admins is normally the suggested way to provide support to a customer (you don't require a license in this case).
No that is a delegated admin only activity. In the case where that cannot be issued the responsibility of any of the features in the admin console fall on the internal resources. It has to be a caveat of the scenario as there is no way around it. For now the most you will get is docs.microsoft.com/.../itpro-introduction-to-automation-apis
Perhaps in the future some more commands will exist but I doubt it will be outside of the delegated admin privilege.
So, if I had a BC license I'd be able to go into the Business Central admin center? Would I also be able to create the Prod/Sandbox environments, and create the companies?
In this scenario it is common and a valid experience if an essential or premium license is assigned to a dedicated user account.
Stay up to date on forum activity by subscribing. You can also customize your in-app and email Notification settings across all subscriptions.
André Arnaud de Cal... 291,240 Super User 2024 Season 2
Martin Dráb 230,149 Most Valuable Professional
nmaenpaa 101,156