Dynamics 365 Finance: Manage dimension security with Microsoft Entra groups

🚨 The Signal: Dynamics 365 Finance now allows assigning dimension security to Microsoft Entra groups instead of individual users. This improves security management by centralising access control and reducing administrative overhead for large organisations.

The Impact

Dynamics 365 Finance administrators are affected, with a reduced risk of misconfigured individual user permissions.

• Dynamics 365 Finance administrators: Simplified security management for dimensions.
• Security teams: Improved auditability of access to sensitive financial data.
• Compliance officers: Easier demonstration of access control policies.
• End-users: No direct impact, but more consistent access to financial data.

The Action

1. Review existing Dataverse group teams for correct configuration and security role assignments.
2. Identify Dynamics 365 Finance dimension security groups currently assigned to individual users.
3. Create or identify appropriate Microsoft Entra groups for these dimension security requirements.
4. Assign Dataverse group teams backed by Microsoft Entra groups to Business performance planning dimension security groups.
5. Remove individual user assignments from dimension security groups where Entra group assignments are now in place.

Domain: Entra · Impact: medium · Workload: Other · Essential Eight: Restrict Administrative Privileges · ISM: ISM-0445, ISM-1175, ISM-1380, ISM-1507, ISM-1508, ISM-1509, ISM-1647, ISM-1648, ISM-1650, ISM-1686, ISM-1688, ISM-1689, ISM-1883, ISM-1897, ISM-1898