web
You’re offline. This is a read only version of the page.
close
Skip to main content

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Microsoft Dynamics 365 | Integration, Dataverse... / Business Units and Sec...
Microsoft Dynamics 365 | Integration, Dataverse...
Suggested Answer

Business Units and Security Roles

(1) ShareShare
ReportReport
Posted on by Community member
Hi,
 
This may seem like a silly question.  I  am trying to work our company D365 Security model and wanted to clarify how the application of security roles works with Business Units.
 
Do you apply security roles directly to Business Unit or are they applied directly to the BU default team ?
 
Within the unifed Interface you can only apply security roles to users or teams, why not business units ?
 
Thanks in advance.
I have the same question (0)
  • Suggested answer
    RudyZhang Profile Picture
    RudyZhang Microsoft Employee on at
    Hi,
     
    Regarding your question about Security Role and Business Unit
     
    According to the official Microsoft documentation, in Dynamics 365, security roles are not applied directly to Business Units. Instead, Security Roles are assigned to users or teams and then those users or teams are associated with Business Units.
     
    By associating users or teams with a Business Unit, their access to data and functionality within that Business Unit is determined. This security model allows for more flexibility in controlling access at the business unit level, as different users or teams can be assigned different security roles. This approach also allows for better management of user and team permissions and their adaptation to actual needs.
     
    Here is a link to the official documentation on permission inheritance
    https://learn.microsoft.com/en-us/power-platform/admin/security-roles-privileges
     
    The official Microsoft documentation also mentions that you can assign security roles directly to the default team in the business unit. This is done to simplify security role management, and all business unit team members can share the same data access rights.

     
    The link to the documentation is as follows.
    https://learn.microsoft.com/en-us/power-platform/admin/create-edit-business-units
     
    In addition, the following two articles on Business Unit and Security Role functionality in practice may help to better understand Business Unit and Security Role
    https://carldesouza.com/dynamics-365-business-units-teams-and-security-in-depth/
    https://dynamics-chronicles.com/article/deep-dive-security-roles-dynamics-365
     
    I hope my answer is helpful to you! If you have any other questions, please feel free to contact me.
     
    Best Regards,
    Rudy Zhang

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Introducing the 2026 Season 1 community Super Users

Congratulations to our 2026 Super Stars!

Congratulations to our 2025 Community Spotlights

Thanks to all of our 2025 Community Spotlight stars!

Congratulations to the February Top 10 Community Leaders

These are the community rock stars!

Leaderboard > Microsoft Dynamics 365 | Integration, Dataverse, and general topics

#1
11manish Profile Picture

11manish 166

#2
ManoVerse Profile Picture

ManoVerse 54 Super User 2026 Season 1

#3
Niki Patel Profile Picture

Niki Patel 40

Last 30 days Overall leaderboard

Featured topics

Welcome to the Microsoft Dynamics 365 forum!
Identifying an Org as CDS or Dynamics
Get batch job history log from D365 FO to Power Automate
Gross and Net Weight of Shipments feeding back into Sales Order (from External Source)

Product updates

Dynamics 365 release plans