Customer Engagement & Dynamics CRM Forum

Expand all | Collapse all

Allowing partner access to subset of D365 data

  • 1.  Allowing partner access to subset of D365 data

    SILVER CONTRIBUTOR
    Posted Apr 06, 2020 04:33 AM
    We have a requirement to allow 1 partner access to a subset of our Dynamics data.

    They need read only access, ability to filter the data for reporting purposes, some basic data visualisations and the ability to export the data.

    None of the data will contain PII and we currently have just one business unit.

    Can anyone advise on the best way to proceed here? Even though no PII data should be accessible, security/data protection would still be very much a concern.

    Regards,
    Sean

    ------------------------------
    Sean O Malley
    AIG
    ------------------------------
    Academy - Online Interactive Learning from Experts


  • 2.  RE: Allowing partner access to subset of D365 data

    TOP CONTRIBUTOR
    Posted Apr 06, 2020 07:45 AM
    Sean,

    You can create a custom security role for your partner, and only provide the level of access you want for each designated record/entity.

    • https://docs.microsoft.com/en-us/dynamics365/customerengagement/on-premises/developer/security-dev/use-record-based-security-control-access-records
    • https://docs.microsoft.com/en-us/power-platform/admin/security-roles-privileges

    If you already have an existing role that is close to what you want, you could use the security role "copy" feature to help you get started, then adjust each tab of your new security role to adjust permissions as needed.

    Not knowing your data or all the criteria you need to use to determine whether a partner can see the records or not, you can also consider other techniques like setting up a partner "Team" and only "Sharing" specific records, or using Field Level Security to hide specific fields on a record.  You can get pretty deep and complicated pretty quickly once you start diving into the security model.  I really enjoyed a presentation I saw by MVP @Gus Gonzalez on setting up CRM Security, and found an earlier post on CRMUG that I re-posted here:  Episode 19: Setting up your CRM Security like a CRM MVP

    ​​

    ------------------------------
    Patrick O'Donnell | VP - Business Development, the Americas
    mscrm-addons.com
    Patrick.ODonnell@mscrm-addons.com
    Atlanta GA
    770 781 8260 Cell
    ------------------------------

    Academy - Online Interactive Learning from Experts


  • 3.  RE: Allowing partner access to subset of D365 data

    TOP CONTRIBUTOR
    Posted Apr 08, 2020 10:18 AM
    Another option to consider is a Powerapps Portal. You can set them up with a login, then use entity permissions to restrict the subset of data they can see.

    Good Luck!

    ------------------------------
    Chris Harrington
    Solutions Architect
    PowerObjects, an HCL Company
    ------------------------------

    Academy - Online Interactive Learning from Experts


  • 4.  RE: Allowing partner access to subset of D365 data

    GOLD CONTRIBUTOR
    Posted Apr 09, 2020 04:31 PM
    @Sean O Malley - Presumably you are online with your CRM deployment?​  If so, @Chris Harrington's suggestion would probably the quickest way to get an outside party into your environment.  It would certainly be less involved that standing up a full-scale portal for your deployment.


    @Patrick O'Donnell's suggestion is viable as well, as long as you are willing to have this outside party have an account in your domain (if on-prem) or instance permissions (if online)


    Our CRM deployment is on-prem, and we have a similar scenario facing us.  We do have an IFD CRM org, so we can get our outside party into our CRM without allowing them on our network (via VPN or something similar).  However, as I mentioned, we do have to provide them an account and credentials within our domain in order for them to access our IFD CRM org.

    I would ​​be curious to hear from @Chris Harrington, is there a "recipe" you are aware of out there that would provide us (on-prem) the opportunity to leverage a PowerApp Portal to meet our particular requirements?

    Best,​

    ------------------------------
    Erik Guthrie
    IT Data & Business Applications Group Manager
    Spectra Logic
    Boulder CO
    CRMUG-Denver Chapter Leader
    erikg@spectralogic.com
    ------------------------------

    Academy - Online Interactive Learning from Experts


  • 5.  RE: Allowing partner access to subset of D365 data

    TOP CONTRIBUTOR
    Posted Apr 11, 2020 08:26 AM
    @Erik Guthrie, sorry for the delay on this.  You wouldn't be able to use Powerapp Portals for an on-premise, sorry. It's strictly a cloud only solution.

    For on-premise, the closet option to Portals in the cloud is the community edition that was released a couple of years ago.  It's basically the source code for the original ADXStudio product that Portals is based on.

    https://github.com/Adoxio/xRM-Portals-Community-Edition ​

    Thanks!

    ------------------------------
    Chris Harrington
    Solutions Architect
    PowerObjects, an HCL Company
    ------------------------------

    Academy - Online Interactive Learning from Experts


  • 6.  RE: Allowing partner access to subset of D365 data

    TOP CONTRIBUTOR
    Posted Apr 13, 2020 02:36 PM
    Erik-

    We are also still on-prem and are using a WordPress site along with a plugin called AlexaCRM. This is allowing us to both have the public facing website read all of the data from 365 and also give secured access to certain partners. They can just do read-only things as of now.

    Joe

    ------------------------------
    Joseph C. Markovich
    IT Manager
    Okaya Electric America
    Valparaiso IN
    ------------------------------

    Academy - Online Interactive Learning from Experts


  • 7.  RE: Allowing partner access to subset of D365 data

    SILVER CONTRIBUTOR
    Posted Apr 10, 2020 12:35 PM
    Hi all,

    @Erik Guthrie, we are online only.

    Given your recommendations I would be leaning towards building a Power Apps Portal​.

    Many thanks for your advice

    ------------------------------
    Sean O Malley
    AIG
    ------------------------------

    Academy - Online Interactive Learning from Experts


If you've found this thread useful, dive deeper into User Group community content by role