Customer Engagement & Dynamics CRM Forum

Expand all | Collapse all

Possible to automate security roles and/or teams?

  • 1.  Possible to automate security roles and/or teams?

    Posted 14 days ago
    Hey all,

    I've googled it to death and can't seem to find a definitive answer. We're using Dynamics 365...is it possible to automate adding new users to specific security roles and/or teams based on a workflow or business rule? I'm not seeing the option anywhere which is interesting to me. Thanks!


    ------------------------------
    Mike Prill
    Team Rubicon USA
    Los Angeles CA
    ------------------------------


  • 2.  RE: Possible to automate security roles and/or teams?

    TOP CONTRIBUTOR
    Posted 13 days ago
    @Mike Prill,

    You can​ now use Azure Active Directory groups to assign security roles instead of having to provide the access rights to an individual team member.

    Using groups lets administrators assign a security role with its respective privileges to all the members of the group, instead of having to provide the access rights to an individual team member.

    The administrator can create Azure AD group teams that are associated to the Azure AD groups in each of the Customer Engagement and Common Data Service environments and assign a security role to these group teams. When members of these group teams access these environments, their access rights are automatically granted based on the group team's security role.

    You can read the entire blog post here.

    ------------------------------
    BR,
    Niels
    ------------------------------



  • 3.  RE: Possible to automate security roles and/or teams?

    GOLD CONTRIBUTOR
    Posted 13 days ago
    Mike,

    We have been able to automate this using a custom workflow action.  Users request access to Dynamics Online through our internal ServiceNow instance.  We have 6 user friendly access types for users to pick from based on what they need to do in the system - Contact Management, Opportunities, etc.  Based on the access type they select they are put in the proper license group (Team Member vs. Customer Engagement Plan).  Currently we manually assign the users the access type they selected through a drop down on the user record.  Based on the access type we select on the user record a custom action on the workflow assigns them the correct security role(s) and access teams.  We are looking to further automate the manual assignment via the drop down list using Flow but we aren't there yet.

    ------------------------------
    Shawn Hickey
    Burns & McDonnell
    Kansas City MO
    ------------------------------



  • 4.  RE: Possible to automate security roles and/or teams?

    SILVER CONTRIBUTOR
    Posted 13 days ago
    Hey @Mike Prill -

    We have been using the Dynamics 365 Workflow Tools by Demian Adolfo Raschkovan to accomplish this. Using his workflow tools we are able to have automatically assign security roles to users when they are created. ​It is not an out of the box solution but it works nicely and the solution contains a wide array of tools too.

    https://github.com/demianrasko/Dynamics-365-Workflow-Tools

    ------------------------------
    Russ Morris
    Application Support Analyst
    Avitus Group
    Billings MT
    ------------------------------



  • 5.  RE: Possible to automate security roles and/or teams?

    Posted 13 days ago
    Thanks all!

    I think the Dynamics 365 Workflow Tools will likely do what we were looking for. And we're also now eyeballing the AAD option as well. Appreciate the feedback!

    ------------------------------
    Mike Prill
    Team Rubicon USA
    Los Angeles CA
    ------------------------------



  • 6.  RE: Possible to automate security roles and/or teams?

    SILVER CONTRIBUTOR
    Posted 11 days ago
    In addition to the other options that community members have mentioned, our admins have used PowerShell to automate security-related tasks. For example, we'll create an Excel file with the user information, business unit, security roles, and anything else needed  and the script will process the file. I can't provide details myself, but here is a good starting point: https://docs.microsoft.com/en-us/powershell/dynamics365/customer-engagement/overview?view=dynamics365ce-ps

    ------------------------------
    Michael Cross
    Senior Consultant
    eLogic
    rochester NY
    ------------------------------



If you've found this thread useful, dive deeper into User Group community content by role