Dynamics 365 Business Central: Governance and administration - Upload, install, and manage PTEs in the admin center

🚨 The Signal: Dynamics 365 Business Central administrators can now directly upload, install, and manage per-tenant extensions (PTEs) via the admin center and API. This simplifies automation and integration with CI/CD pipelines, enhancing control over extension lifecycles.

The Impact

Business Central administrators are affected, with a reduced risk of unmanaged or insecure application extensions.

  • Business Central Admins: Enhanced control over extension deployment reduces risk.
  • Security Teams: Improved visibility into application changes for better auditing.
  • Developers: Streamlined CI/CD integration for secure application delivery.

The Action

  1. Review existing Business Central extension deployment processes for integration opportunities.
  2. Update CI/CD pipelines to leverage new admin center API endpoints for PTE management.
  3. Establish or review policies for PTE approval and deployment within the Business Central admin center.
  4. Ensure appropriate access controls are in place for Business Central administrators managing PTEs.

Domain: Other · Impact: medium · Workload: Other · Essential Eight: Application Control · ISM: ISM-0843, ISM-1490, ISM-1544, ISM-1582, ISM-1656, ISM-1657, ISM-1658, ISM-1659, ISM-1660, ISM-1870, ISM-1871