web
You’re offline. This is a read only version of the page.
close
Skip to main content
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Finance | Project Operations, Human Resources, ... / OData Security - D365FO
Finance | Project Operations, Human Resources, ...
Answered

OData Security - D365FO

(0) ShareShare
ReportReport
Posted on by SNAFU 5

Have been working with and supporting Dynamics 365FO for over 2 years. Is there any way of securing Odata access as users seem to be able to access with there standard login credetials for the application and can pull any data they want from the system and even do cross-company.

We have some applications that connect and need this access but dont want any user access other companies data but there doesnt seem to be an easy way to restrict this?

Has anyone else had this issue, seems like a big issue in regards to security and data being lost/misuesed.

I have the same question (0)
  • Suggested answer
    nmaenpaa Profile Picture
    nmaenpaa 101,160 Moderator on at
    RE: OData Security - D365FO

    Users can only read data that their user role grants. So it's just as secure and manageable as accessing data via the user interface.

    You can grant roles per company, too.

  • Suggested answer
    nmaenpaa Profile Picture
    nmaenpaa 101,160 Moderator on at
    RE: OData Security - D365FO

    Also, data entities are covered by their own security privileges so you have very good control over the access (you can grant read or write access per entity).

  • SNAFU Profile Picture
    SNAFU 5 on at
    RE: OData Security - D365FO

    Thanks Nikolaos,

    We are using mostly the standard roles for our users, what security privalidges need to be assigned or removed from them to stop them accessing Odata.

    Is there any microsoft documentation on this?

  • Suggested answer
    nmaenpaa Profile Picture
    nmaenpaa 101,160 Moderator on at
    RE: OData Security - D365FO

    First of all, please think your requirement one more time. If you allow the user to access some information via D365 user interface, why not allow them to access it with Excel or Power BI (OData)? What is the risk you see here?

    You can't use the standard roles in this case, you need to create your own. There's no detailed documentation but let your developer use cross references in Visual Studio to find which privileges are related to the entities.

  • Verified answer
    André Arnaud de Calavon Profile Picture
    André Arnaud de Cal... 299,407 Super User 2025 Season 2 on at
    RE: OData Security - D365FO

    Hi Snafu,

    Nikolaos is correct that entities are linked on a privilege like menu items. Usually, Microsoft did create new separate privileges, but you can also have privileges with both menu items and the data entities. In fact the documentation is in the system. You can use cross references and meta data search in Visual Studio, but if there are security objects changed using configuration, this is not visible in Visual Studio.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

News and Announcements

Join experts in person to explore low code and AI agents at the Power Platform Community Conference sponsored by Microsoft

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Abhilash Warrier – Community Spotlight

We are honored to recognize Abhilash Warrier as our Community Spotlight honoree for…

Congratulations to the September Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > Finance | Project Operations, Human Resources, AX, GP, SL

#1
CA Neeraj Kumar Profile Picture

CA Neeraj Kumar 1,882

#2
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 794 Super User 2025 Season 2

#3
Sohaib Cheema Profile Picture

Sohaib Cheema 525 User Group Leader

Last 30 days Overall leaderboard

Featured topics

End-of-life Announcement for Microsoft Dynamics GP

Product updates

Dynamics 365 release plans