Finance | Project Operations, Human Resources, ...

What is permission required for Application user used for API calls

(0) Share

Report

Posted on by Amit Prajapati

162

Hi Community,

I wanted to ask a question regarding the Application user/ Service Account setup in the FnO. I wanted to create a user which can be used in the Scribe Integration but I don't want to provide the System admin to that principle user due to security protocol. Can anyone suggest the best practices for the same and Microsoft document for reference?

Also, Wanted to check whether System Admin is minimum requirement to access the API from external system if not, what is minimum security roles that we can provide.

I have the same question (0)

All responses (5)

Answers (0)

Suggested answer

nunomaia 25 Moderator on at

Like (0)

Report

You don't need an admin role.

You can create a limited role for integration purposes.

For example, if you are using odata, you can have permissions for each entity for read / write.

You can assign permissions to a user to smilate permissions and then map to azure application

Was this reply helpful? Yes No
Mariano Gracia on at

Like (0)

Report

As Nuno says, you can define a role to access to specific entities, also to assign system user role is mandatory

Was this reply helpful? Yes No
Amit Prajapati 162 on at

Like (0)

Report

What role we need to give to user for custom API and Odata Method which our third party application is calling

Was this reply helpful? Yes No
Mariano Gracia on at

Like (0)

Report

We cannot answer you as long as we don't know which api is calling that third party application, and because it's a custom api it is your responsibility to create the appropriate security objects: Security roles and privileges - Power Platform | Microsoft Learn

Was this reply helpful? Yes No
Barretao 80 on at

Like (0)

Report

learn.microsoft.com/.../services-home-page

"As a better practice, you should provision a dedicated service account that has the correct permissions for the operations that must be performed."

Was this reply helpful? Yes No