Finance | Project Operations, Human Resources, ...

Restrict Access to F&O in office area

(1) Share

Report

Posted on by AB-21051008-0

Hi, I have a requirement from a client who has used D365 F&O (Cloud). They want to restrict access to F&O only in the office area. And what I can think of is to use their network IP or Geo Tagging (Latitude and Longitude). But as far as I know, F&O does not have access to retrieve client-side IP addresses or Geo Tagging. Is there any solution that can be used? It doesn't have to be limited to F&O, X++, or .NET. if integration is needed such as Azure Function or others can be considered.

Categories:

Dynamics 365 Finance

I have the same question (0)

All responses (7)

Answers (0)

udaY-ch 5,133 on at

Like (1)

Report

Hi

I havent tried this out but i have heard this scenario and this can be achieved by conditional access. Ignore if you have tried else you can explore in this area.

https://learn.microsoft.com/en-us/power-platform/admin/restrict-access-online-trusted-ip-rules

https://yzhums.com/33789/

Thanks

Uday

Was this reply helpful? Yes No
Suggested answer

Jonas "Jones" Melgaard 4,980 Most Valuable Professional on at

Like (2)

Report

We are using conditional access policies in Entra-Id to restrict access to our Microsoft cloud applications. Dynamics F&O should also be supported.
I found an example of how to set it up: Block access to Microsoft Dynamics 365 F&O by location

Was this reply helpful? Yes No
AB-21051008-0 89 on at

Like (0)

Report

Thanks for your suggestion, so it's true that X++ can't take client-side IP Address or Geo Tagging? And for the Microsoft Entra Premium license, is it only enough for the admin who will set up Conditional Access or all users from F&O must have the licenses?

Was this reply helpful? Yes No
Suggested answer

udaY-ch 5,133 on at

Like (1)

Report

hi

Yes, While defining the conditional policy you can define for all users or user groups level as well.

Thanks

Uday

Was this reply helpful? Yes No
Jonas "Jones" Melgaard 4,980 Most Valuable Professional on at

Like (1)

Report

Correct, F&O has no IP restrictions the same way as Power Platform. You need to have a P1 license for all the users in question to stay compliant if you use conditional access policies. You might be able to configure it, but the hammer will fall if Microsoft figures out you are not compliant.

Express Route might be able to also achieve this also, but it's way more expensive than getting the P1 licenses

Was this reply helpful? Yes No
Anton Venter 20,346 Super User 2025 Season 2 on at

Like (0)

Report

In addition to the suggestions below, the solution will have to be done on network infrastructure level, policies and configuration, not with code in the application.

Was this reply helpful? Yes No
Adis 6,064 Super User 2025 Season 2 on at

Like (0)

Report

Hi,

Just out of curiosity, whats the reason behind restricting it in regards to a location? I would assume that someone would want to restrict access to a user always. How you identify these users is a complete different story, whether you assign roles, work with XDS or another solution.

Kind regards, Adis

If this helped, please mark it as "Verified" for others facing the same issue

Keep in mind that it is possible to mark more than one answer as verified

Was this reply helpful? Yes No