Importing users via AAD groups in D365 finance

(0) Share

Report

Posted on by migi111

485

Hi,

We have imported many users individually by using the "import users" -functionality. Now the customer is starting to user IAM services and wants to add users straight to the AAD-group, from where it would automatically be added as a user in D365F. I have enabled AAD groups from the license configuration, but now...the question, what happens to the existing users if I add the AAD group to D365F by using the "import groups" -functionality? Currently all the existing users belong to that group in AAD and they have added there couple more which are not yet imported as users to D365F.

I have the same question (0)

All responses (4)

Answers (3)

Verified answer

Mea_ 60,284 on at

Like (0)

Report

If group gives to a user "A" role and he has "B" role assigned directly, security for the user will be "A" + "B". So it gives you ability to give user more rights that his group has.

Was this reply helpful? Yes No
Verified answer

André Arnaud de Cal... 301,053 Super User 2025 Season 2 on at

Like (0)

Report

Hi Migi111,

You can read a bit more related to this topic on my blog:dynamicspedia.com/.../

In addition to the reply from Ievgen:

If the setup of the user in AAD meets the requirements (License assigned), the user will be imported the fist time when they log in. If they are already a user, nothing related to the user record itself will happen. You can use the AAD groups and security role assignments side-by-side. Manually assigned roles will have higher priority. That means, if a user has access to a certain role via the group and also have this role assigned manually, the rights will remain when the user will be removed from the AAD group.

Was this reply helpful? Yes No
Vishals786 on at

Like (0)

Report

Hi migi111 ,

You have to create the user groups in Azure Active Directory. Now this can be done in two portals :-

1) portal.office.com

2) portal.azure.com

Sign In in to any of the above portals and create user group and add the users in that group. Assign proper licenses as per your requirement.

Once you are logged in D365 Fin Ops with the same tenant you have to choose the option Import Users and then you will be able to see the group you created and will be able to import the same.

Thanks and Regards

Vishal Sahijwani

Was this reply helpful? Yes No
Verified answer

Rahul Mohta 21,032 on at

Like (0)

Report

if user is already added in D365FO and also additional roles are given via the user group then it is combination of access rights which would get applied on the user

Was this reply helpful? Yes No