We are deploying PowerBI reports and dashboards into PowerBI.com workspace from Dynamics 365 Finance and these are not embedded reports in Dynamics 365 Finance. What is the security role required for the service account within Dynamics 365 Finance.
Hi Macdee21,
Can you tell what is the data source(s) for these Power BI reports? Are you connecting to OData entities or do you get data from a data mart?
Hi Macdee,
For detailed information about D365 service accounts and their permissions, you can refer to the table in the article:
Create service accounts | Microsoft Learn
For security roles in D365, you can check the following article:
Deep Dive : Security Roles in Dynamics 365 | Dynamics Chronicles (dynamics-chronicles.com)
In addition, Power BI offers a suite of security features to help restrict data. One way to do this is with Row-level security. Row-level security (RLS) with the Power BI Desktop can be used to restrict data access for specific users, filtering data at the row level, and defining filters within roles.
For more information about D365 security roles in power BI you can check the link below:
Row-level security (RLS) with Power BI - Power BI | Microsoft Learn
Power BI and Dynamics 365 Data Security - Carl de Souza
Best Regards,
Hana
Hi Andre,
Thanks for your response, currently we are using entity store. The service account has been given system admin which is not right I am assuming it will need to be granted the ability to manage Data Management, Entity Store and PowerBI configuration forms within Dynamics 365 Finance. I need to reduce the permissions for this service account from system admin.
Regards,
Macdee
I have been given more information we are not using OData entities for connection, currently all the BI report is build with the data push into data lake all the power bi reports consume data from synapse.
Thanks for the clarification. If you are using the Data Lake, then permissions in Power BI are to be set on the Data Lake access. There is only some security in Dynamics 365 Finance required to be able to export the data to the Data Lake. The account used to export the data should at least have access to the data entities and tables which will be exported to the Data Lake.
Thanks for the explanation.
Under review
Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.
As AI tools become more common, we’re introducing a Responsible AI Use…
We are honored to recognize Pallavi Phade as our Community Spotlight honoree for…
These are the community rock stars!
Stay up to date on forum activity by subscribing.
André Arnaud de Cal... 765 Super User 2025 Season 2
CA Neeraj Kumar 743
Sumit Singh 551
