web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Small and medium business | Business Central, N... / User Permission from A...
Small and medium business | Business Central, N...
Answered

User Permission from Azure AD Permissions

(0) ShareShare
ReportReport
Posted on by Ben Baxter 6,620 Super User 2025 Season 2

If a client wants to manage the User permissions from within Azure AD, is it possible when a User is added to Business Central that the permissions assigned come from the Azure AD permissions or an Azure AD User Group set?  If so, I would love to hear how this is accomplished.

If permissions are changed in Azure, is it possible to push those permissions to Business Central?

If a User is disabled in Azure, is it possible to disable them in Business Central?

Thank you in advance for an information you can provide.

I have the same question (0)
  • Suggested answer
    Teddy Herryanto (That NAV Guy) Profile Picture
    Teddy Herryanto (Th... 14,284 Super User 2025 Season 2 on at

    The user group is unique to Business Central. I don't think you can setup to push permission from Azure to BC.

    If you disable the user in AD, the user will not be able to login to BC anymore because they can't login to that AD user ID.

  • Ben Baxter Profile Picture
    Ben Baxter 6,620 Super User 2025 Season 2 on at

    Teddy,

    Thank you for the response.

    Anyone think something could be automated using Power Automate?  Watch for changes to permissions in Azure and kick of an automation to send data to BC?

  • Suggested answer
    Teddy Herryanto (That NAV Guy) Profile Picture
    Teddy Herryanto (Th... 14,284 Super User 2025 Season 2 on at

    I have never try it, but you can possibly do it

  • Suggested answer
    Ben Baxter Profile Picture
    Ben Baxter 6,620 Super User 2025 Season 2 on at

    Found an answer hidden in another Azure AD post: https://yzhums.com/18304/  The good news it looks possible in the new 2021 release wave 2!

  • Suggested answer
    Teddy Herryanto (That NAV Guy) Profile Picture
    Teddy Herryanto (Th... 14,284 Super User 2025 Season 2 on at

    That is a security group to prevent user from accessing a certain environment. If you have two production environment, you can make sure the user only accessing a specific environment.

    Nothing to do with user group or permission set in BC.

  • Verified answer
    Ben Baxter Profile Picture
    Ben Baxter 6,620 Super User 2025 Season 2 on at

    Correct, but it is a start.  When the IT team doesn't want to leave Azure AD, at least now we can tell them they can remove an AD Group from a User and it will block their access to Business Central.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Congratulations to the November Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > Small and medium business | Business Central, NAV, RMS

#1
OussamaSabbouh Profile Picture

OussamaSabbouh 2,135

#2
YUN ZHU Profile Picture

YUN ZHU 733 Super User 2025 Season 2

#3
Sumit Singh Profile Picture

Sumit Singh 612

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans