Admin account is denied access to Dynamics

(3) Share

Report

Posted on by Chris1968

333

Hi

My admin account is being denied access to any of our Dynamic Environments. It as asked me to sign in and confirm my identity through MFA, but still doesn't let me access. This only started recently, in the last couple of days but nothing as changed with my account...

Any ideas??

Categories:

Microsoft Dynamics CRM

I have the same question (0)

All responses (13)

Answers (1)

Suggested answer

Saif Ali Sabri 2,351 Super User 2025 Season 2 on at

Like (0)

Report
“AI was used in this reply”.
Admin Account Denied Access to Dynamics 365

The error suggests that your admin account might be disabled, unlicensed, or lacking proper security roles in Dynamics 365. Follow these steps to regain access:

1. Verify User Status in Azure AD

Go to Azure AD Admin Center (portal.azure.com).

Navigate to Users → Search for your account.

Ensure the account is enabled and assigned the correct roles.

2. Check Dynamics 365 Licensing

In Microsoft 365 Admin Center (admin.microsoft.com):

Go to Users → Active users.

Select your account and verify if a Dynamics 365 license is assigned.

If missing, reassign the required Dynamics 365 Customer Engagement (CE) or Finance & Operations (F&O) license.

3. Reassign System Administrator Role in Dynamics

Ask another Global Admin or Dynamics Admin to:

Go to Power Platform Admin Center (admin.powerplatform.microsoft.com).

Select Environments → Choose the environment.

Click Settings → Users + Permissions → Users.

Find your account and assign "System Administrator" security role

4. Clear Cache & Try Different Browser

Clear browser cache & cookies or try Incognito Mode.

Test login from a different browser or device.

5. Check for Conditional Access Policies (CAPs)

In Azure AD, go to Security → Conditional Access.

Ensure no policy is blocking access based on location, device, or MFA status.

6. Reset MFA or Login Credentials (If Required)

Go to https://mysignins.microsoft.com.

Reset MFA settings if necessary.

Was this reply helpful? Yes No
Jonas "Jones" Melgaard 4,986 Most Valuable Professional on at

Like (0)

Report

Hi Chris,

Is this an on-premise D365 CRM or D365 cloud CRM?

Judging from the URL it might be a cloud CRM.

If so, do you have access to the Power Platform Admin Center? Then you can check the rights of your user.

Was this reply helpful? Yes No
Chris1968 333 on at

Like (0)

Report

Hi,

Thank you both for your responses.

I can confirm that my account is enabled in Azure and when checking Security roles the account does have the System Administrator role assigned

I can access the apps via the 'InPrivate' route...

Was this reply helpful? Yes No
Jonas "Jones" Melgaard 4,986 Most Valuable Professional on at

Like (0)

Report

Okay this is odd... It might be because you are not part of a team in CRM, but let's see...

1: Have you run diagnostics from PPAC? Here I'm interesting in the Access mode, it should be Read-Write

2: Do you get any advice from the app access checker?

Was this reply helpful? Yes No
Chris1968 333 on at

Like (0)

Report

Hi,

This is what I see when after running diagnostics

I have the necessary access to the apps i need???

Was this reply helpful? Yes No
Jonas "Jones" Melgaard 4,986 Most Valuable Professional on at

Like (0)

Report

Looks fine to me. If you can run the diagnostics with all green flags in the diagnostics, and all blue in the app access checker, then I'd expect it to work.

Last question: Have you tried using incognito/inprivate mode in your browser, and navigated to the root of the CRM environment?

I.e. https://environment.crm.dynamics.com/main.aspx

Was this reply helpful? Yes No
Chris1968 333 on at

Like (0)

Report

Hi,

I am using InPrivate at the moment to access the environments

Was this reply helpful? Yes No
Jonas "Jones" Melgaard 4,986 Most Valuable Professional on at

Like (0)

Report

Okay, I did not expect the new admin interface to work when you receive this login error.

Do you also get the error if you click on "Dynamics 365" and "Sales Hub", like this:

Was this reply helpful? Yes No
Chris1968 333 on at

Like (0)

Report

Hi,

I get the error 'Access Denied' when I select the url for any of my D365 environments from my favourites list

Was this reply helpful? Yes No
Verified answer

Daivat Vartak (v-9d... 7,835 Super User 2025 Season 2 on at

Like (1)

Report
Hello Chris,

This is a frustrating situation, especially with an admin account. Let's troubleshoot this "Access Error" in Dynamics 365, focusing on the potential causes and solutions based on the error message and your additional information.

Analyzing the Error Message:

"The system could not log you on. This could be because the specified user (Id = ...) is disabled in Microsoft Dynamics 365." This is the core message. Even though you haven't disabled your account, the system is treating it as such.

MFA (Multi-Factor Authentication): The fact that you're being prompted for MFA confirms that Azure Active Directory (Azure AD) recognizes your account. The issue lies within Dynamics 365.

"Try this action again. If the problem continues, check the Microsoft Dynamics 365 Community for solutions or contact your organization's Microsoft Dynamics 365 1 Administrator. Finally, you can contact Microsoft Support." 2 Standard troubleshooting advice, but we'll try more specific steps.

"Consider enabling this user." This points to the system treating your account as disabled.

Troubleshooting Steps:

Double-Check User Status in Dynamics 365:

Even though you haven't disabled the account, log in to the Power Platform Admin Center (if you can access it with another admin account) or use PowerShell to verify your user's status within Dynamics 365.

Navigate to Environments > [Your Environment] > Settings > Users + permissions > Users.

Find your user account and check the Status field. If it's disabled, re-enable it.

License Verification:

Ensure your user account has a valid Dynamics 365 license assigned in the Microsoft 365 Admin Center.

Go to Users > Active users, find your account, and check the Licenses and apps tab.

Security Roles:

Verify that your user account has the necessary security roles assigned in Dynamics 365.

If you're an admin, you should have the System Administrator role.

In the Power Platform Admin Center, go to Environments > [Your Environment] > Settings > Users + permissions > Users, select your user, and click Manage roles.

Azure AD Sync Issues:

If your Dynamics 365 environment is integrated with Azure AD, there might be sync issues.

Check Azure AD: Ensure your user account is active in Azure AD.

Force Sync (If Applicable): If you have Azure AD Connect, try forcing a synchronization.

Browser Issues:

Clear your browser's cache and cookies.

Try a different browser or an incognito/private window.

PowerShell Verification:

Use the Dynamics 365 PowerShell module to check your user's status and license information.

This can provide more detailed information than the user interface.

Example PowerShell commands:
PowerShell

# Connect to Dynamics 365
Connect-CrmOnline -Url "YOUR_DYNAMICS_URL" -Credential (Get-Credential)

# Get user details
Get-CrmUser -UserId "YOUR_USER_ID"

# Get user licenses
Get-CrmUserLicense -UserId "YOUR_USER_ID"

Service Request ID:

The error message provides a Service Request Id. If you contact Microsoft Support, provide them with this ID. It will help them investigate the issue.

Recent Changes:

Even if you haven't made changes, check if any other administrators or automated processes might have modified your user account or security roles.

Temporary Issue:

As the error message suggests, try again after some time. It might be a temporary service issue.

If all else fails, contact Microsoft Support. Provide them with the error message details, including the Service Request Id, Tenant Id, Organization Id, and Unique name.
Important Note: Since this is your admin account, having another active admin account is crucial for troubleshooting and potential recovery.

If my answer was helpful, please click Like, and if it solved your problem, please mark it as verified to help other community members find more.
If you have further questions, please feel free to contact me.

My response was crafted with AI assistance and tailored to provide detailed and actionable guidance for your Microsoft Dynamics 365 query.

Best Regards,
Daivat Vartak

Was this reply helpful? Yes No