Customer Engagement & Dynamics CRM Forum

Expand all | Collapse all

Licensing

Jump to Best Answer
  • 1.  Licensing

    SILVER CONTRIBUTOR
    Posted Sep 26, 2019 12:08 PM
    Hi,

    We have 1 Office 365 Admin Centre for our company.

    Our company has two distinct Dynamics systems for separate parts of the company:

    http://part_a.crm4.dynamics.com
    http://part_b.crm4.dynamics.com

    Each part has a live and 2 sandbox environments.

    At the moment, all users are enabled users in all Dynamics systems.  We control access to the specific environments with security roles.  A user will never need to log in to both company Dynamics systems.

    We have a vendor solution which licences based on the number of enabled users.  The vendor solution is installed in one live environment only.  In the office admin center, we can only assign or remove a licence, not say to which part of the company this applies.  We want to configure these licences to part_a or part_b of the company as we'd be able to pretty much halve the cost of licensing of the vendor solution.

    Is this possible?

    Any help gratefully received!

    Stewart

    ------------------------------
    Stewart Tranter
    Business Systems Manager
    TCL Group
    Derbyshire, UK
    ------------------------------
    Conference-CRMUG_200x200


  • 2.  RE: Licensing

    TOP CONTRIBUTOR
    Posted Sep 26, 2019 01:21 PM
    Stewart,
        Are you depending on having both instances in the same subscription (such as O365 email integration)? My guess is that you would need to set up a separate subscription (tenant) and migrate one of the environments over to that. If you need to only send out email in one of the environments, you can create an Azure Logic App to query the Email Messages entity for all Pending Send messages, then send them out using SendGrid and change the email status to Sent.

    It is possible to move a working instance to a new subscription with the help of MSFT support. We recently had a client that had 2 instances in different subscriptions and we had to push MS very hard to get them to move it, but they did it after about 3 months of effort.

    ------------------------------
    If this answered your question, please click on the arrow button next to Reply Inline and choose 'Make Best Answer.'
    Thanks.
    Nelson Johnson, Solution Architect
    BroadPoint, Inc., Bethesda MD
    Link with me! https://www.linkedin.com/in/nelsonjohnson/
    ------------------------------

    Conference-CRMUG_200x200


  • 3.  RE: Licensing

    SILVER CONTRIBUTOR
    Posted Sep 27, 2019 01:43 AM
    Although on second thoughts maybe not

    ------------------------------
    Peter Hale
    Naish Pty Ltd
    ------------------------------

    Conference-CRMUG_200x200


  • 4.  RE: Licensing
    Best Answer

    SILVER CONTRIBUTOR
    Posted Sep 27, 2019 01:44 AM
    maybe this one

    https://community.dynamics.com/365/b/d365demystified/posts/restrict-user-access-to-a-d365-instance-using-security-groups

    ------------------------------
    Peter Hale
    Naish Pty Ltd
    ------------------------------

    Conference-CRMUG_200x200


  • 5.  RE: Licensing

    SILVER CONTRIBUTOR
    Posted Sep 27, 2019 04:47 AM
    Hi Peter,

    This looks like the answer, thanks for digging this out!

    Stewart

    ------------------------------
    Stewart Tranter
    Business Systems Manager
    TCL Group
    Derbyshire, UK
    ------------------------------

    Conference-CRMUG_200x200


  • 6.  RE: Licensing

    SILVER CONTRIBUTOR
    Posted Sep 27, 2019 06:18 AM

    Hi Stewart

     

    I guess I got lucky with my google foo.

     

    I knew it could be done – initially thought it was Office 365 Groups then realized that wasn't the right one so changed my search criteria.

     

    Anyhow, I'm sure you'll be able to follow the instructions.

     

    The other issue you have is every damn Global Admin also becomes a user in D365 – albeit with no permissions so watch that as well.

     

    In my opinion the 3rd party should have their own security role (it doesn't even have to do anything – could even be empty) and just count users assigned that role but I guess that would require someone to think  Angel face with no fill Save a lot of stuffing around.

     

    Take care

     

    Pete




    Conference-CRMUG_200x200


  • 7.  RE: Licensing

    Posted Sep 27, 2019 02:53 PM
    This is what I was referring to.

    ------------------------------
    Chris Bishop
    Consultant
    Bishop Technology Consulting
    ------------------------------

    Conference-CRMUG_200x200


  • 8.  RE: Licensing

    Posted Sep 26, 2019 04:03 PM
    Edited by Chris Bishop Sep 27, 2019 02:56 PM
    So based on the information given, you have two instances and the per license solution is only installed on one of those instances. You would like to maintain distinction of users between your two instances.

    With the understanding that a Sales/CEP/etc. licensed user (if granted the right Security roles in each instance) can access as many instances as they are granted permissions to (without incurring additional MS licensing costs), if you are looking to restrict users from part_a from being able to login to part_b and vice versa, you can assign a Security group to the instance. This will make sure that only users that are part of a designated Security Group (accessed from the O365 admin centre) will be able to access part_a or part_b instance.

    The Dynamics tenant admin will be able to assign the Security Group in the Admin Portal for your Dynamics instances.

    Hope this helps!

    ------------------------------
    Chris Bishop
    Consultant
    Bishop Technology Consulting
    ------------------------------

    Conference-CRMUG_200x200


  • 9.  RE: Licensing

    TOP CONTRIBUTOR
    Posted Sep 26, 2019 04:14 PM
    Edited by Nelson Johnson Sep 26, 2019 04:16 PM
    Chris,
       The way I read it, it is not access control that is the issue. He has a 3rd party solution installed in one instance that charges based on "Active Users" (lets call it Instance A) but since there are people assigned a license to Customer Engagement via the O365 Admin and they are only using Instance B, they appear to be an "Active User" in both instances. This is also a problem for my clients that have issued a license to some users for Flow, and they now appear as Active Users in CE, even though they do not have a license in CE.

    ------------------------------
    If this answered your question, please click on the arrow button next to Reply Inline and choose 'Make Best Answer.'
    Thanks.
    Nelson Johnson, Solution Architect
    BroadPoint, Inc., Bethesda MD
    Link with me! https://www.linkedin.com/in/nelsonjohnson/
    ------------------------------

    Conference-CRMUG_200x200


  • 10.  RE: Licensing

    SILVER CONTRIBUTOR
    Posted Sep 27, 2019 04:16 AM
    This is exactly the situation.

    As an aside, there are two parts to a Flow free licence, Flow and CDS.  If you remove the CDS part, the user is disabled in Dynamics if they don't have a Dynamics licence.

    Stewart

    ------------------------------
    Stewart Tranter
    Business Systems Manager
    TCL Group
    Derbyshire, UK
    ------------------------------

    Conference-CRMUG_200x200


  • 11.  RE: Licensing

    Posted Sep 27, 2019 02:52 PM
    Edited by Chris Bishop Sep 27, 2019 02:56 PM


    Conference-CRMUG_200x200


  • 12.  RE: Licensing

    Posted Sep 27, 2019 02:54 PM
    Ah! I can see how that would be troublesome. My experience with vendors is that they use their own security role to restrict usage and report on how many licenses to charge for.
    Apologies

    ------------------------------
    Chris Bishop
    Consultant
    Bishop Technology Consulting
    ------------------------------

    Conference-CRMUG_200x200


  • 13.  RE: Licensing

    SILVER CONTRIBUTOR
    Posted Sep 27, 2019 01:40 AM
    Hi  Stewart

    Does this help

    https://docs.microsoft.com/en-us/dynamics365/customer-engagement/admin/deploy-office-365-groups

    Read it thoroughly because I think it is what you want.

    Use Office 365 groups  -  not sure if can activate "after the event"

    Pete

    ------------------------------
    Peter Hale
    Naish Pty Ltd
    ------------------------------

    Conference-CRMUG_200x200


If you've found this thread useful, dive deeper into User Group community content by role