Setup Virtual Entities for Finance and Opertaions to Dataverse.

(1) Share

Report

Posted on by PavanM

Hi Team,

We have a requirement to create canvas app and connect it to the finance and operations which is in other environment to do all the CRUD operations from the powerapps.

For that we are trying to set up a virtual entity concept to build a connection between these two instances.

By following the below provided documents we tried to setup everything, but at the final step when iam trying to get all the "Available Finance and Operation Entities" through the Advanced find, it is throwing an error saying that "An error has occured" in the Dataverse.

1.https://learn.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/power-platform/admin-reference

2.https://learn.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/power-platform/enable-virtual-entities

Error is occuring when iam working on steps 6 & 7 on link-2 "Generate Virtual Entities section".

1738.Error1.PNG 26450.Error.PNG

Any help would be appreciated.

Thanks in advance.

I have the same question (0)

All responses (9)

Answers (0)

André Arnaud de Cal... 300,904 Super User 2025 Season 2 on at

Like (0)

Report

Hi Pavan,

Can you verify if you have the correct role assigned to the user which is linked to the app registration details on the form Azure Active Directory applications in Dynamics 365 F&O?

For the Virtual entity connection, did you provide the correct value for the AAD Application secret?

Was this reply helpful? Yes No
PavanM 7 on at

Like (0)

Report

Hi Andre,

Thanks for the quick response.

Yes, I have assigned the correct role as per the document.

Also the secret is correct too.

FYI,

I added my user to the Finance and operations instance and assigned a "system admin" role, and then it started working, but when i try to access it without my user account(i.e., Interactive user who is trying to make the call from cds) in finance, it is not working.

When iam trying to access data with s2s app user, it is not working.

Do all Microsoft Power Platform users have to be users in finance and operations?

Any interactive user of Microsoft Power Platform who tries to access finance and operations data through a virtual entity must also exist as a user in finance and operations. Therefore, technically, not all users have to be users in finance and operations. Only those users who access finance and operations data through virtual entities must be users in finance and operations.(Working)

A S2S application user can also be used to call into virtual entities. For this kind of integration, the application user must be set up in System administration > Setup > Configure Azure Active Directory Applications. This allows for applications to integrate with finance and operations using virtual entities.(Not Working).

Do we need to create all the Interactive users in finace and operations to access data/virtual entities from Finance and operations?

Regards,

Was this reply helpful? Yes No
André Arnaud de Cal... 300,904 Super User 2025 Season 2 on at

Like (0)

Report

Hi Pavan,

The S2S application user is used to make the integration between the F&O Virtual entity plugin on Dataverse and F&O. To be able to interact with the data, the user needs to have permissions on data entities.

Was this reply helpful? Yes No
PavanM 7 on at

Like (0)

Report

Hi Andre,

Thank you for the response.

You mean, the S2S user is only to make the integration between the instances? It means if i want to find the "Available Finance and operations entities" in Dataverse, Is the S2S User is sufficient or do i still need to provide an access to the interactive user who is trying to access the virutal entities from dataverse?

I mean not about the data access,but to setup/getting the list of virutal entities in Dataverse as shown below.

Is there a way that one can access the data from virutal entities with out having access to the data in Finance and operations?

Scenario:

We have some 300 users who are trying to access the data from finance and operations through virutal entities and doing CRUD operations in powerapps.So, do i need to provide access to all these users for Finance and operations instance?

Thanks in advance.

Best Regards,

Was this reply helpful? Yes No
André Arnaud de Cal... 300,904 Super User 2025 Season 2 on at

Like (0)

Report

Hi Pavan,

I don't know exactly the border on security where the S2S user comes to play. Not sure if this user can see the list with entities or not. At least, the users should have roles (and licenses) assigned in Dynamics 365 F&O to interact with the data.

Was this reply helpful? Yes No
Sukrut Parab 71,710 Moderator on at

Like (0)

Report

Regarding your error. If you deploy environment using new power platform integration and configure DW application using LCS , things like DW , virtual entities etc are configured for you and you don't have to follow manual steps.

Are you using tier 1 or tier 2 environment?

If you are using virtual entities all your users needs to have license in F&O.

Regarding S2S user, read below snippet from standard documentation - learn.microsoft.com/.../virtual-entities-overview

During the S2S calls, Dataverse provides the identity of the user in Dataverse who is invoking the action. The CDSVirtualEntityAdapterService web API looks up the associated user in finance and operations apps and runs the query in the context of that user. Therefore, the S2S call doesn't have to have explicit access to all the finance and operations entities.

Was this reply helpful? Yes No
Community member 5 on at

Like (0)

Report

Hi PavanM,

Did you get the solution for this issue ? I am also having the same issue. Want to have data availability for CE users that doesn't have FNO access. Waiting for your response.

Was this reply helpful? Yes No
André Arnaud de Cal... 300,904 Super User 2025 Season 2 on at

Like (0)

Report

@Amir,

Your question is different from the original poster. The question was about the setup, not the actual data access. Next time, please create a new question on the forum.

To answer your question, the CE users would also need to be set up as users in F&O and access to the data can be managed via data entity permissions on security roles. Based on read-only access or full CRUD permissions, the user will at least need a Team members license.

Was this reply helpful? Yes No
Community member 5 on at

Like (0)

Report

Hi Andre,

Thanks for your response,

We cannot assign FNO license to customer service agents. They only need to view FNO orders in CE. Can't we use S2S application user for integration ? So that those who does not have FNO license can able to see FNO order data in CE.

Was this reply helpful? Yes No