Dynamically Assigning Business Units and Security Roles in Dynamics 365 with Power Automate

 

Dynamically Assigning Business Units and Security Roles in Dynamics 365 with Power Automate

In the dynamic world of Dynamics 365, managing user access through business units and security roles is crucial for maintaining data security and ensuring that users have the necessary permissions to perform their duties. Power Automate offers a flexible way to automate the process of assigning business units and security roles to users. This article demonstrates how to leverage the "List rows" and "Update a row" actions for business units, and "List rows" with a filter followed by "Relate rows" for security roles.

Updating a User's Business Unit

Step 1: List Business Units

1. Begin by creating a new flow in Power Automate.
2. Add the "List rows" action, selecting your Dynamics 365 environment and setting the "Table name" to "Business Units".
3. Apply a filter query to locate the specific business unit if known.
4. 
   
   
   

Step 2: Update the User's Business Unit

1. Add the "Update a row" action, choosing the same Dynamics 365 environment.
2. Set the "Table name" to "Users".
3. For "Row ID", input the ID of the user whose business unit you wish to update.
4. In the "Business Unit" field, use the business unit ID obtained from the "List rows" action.

This method dynamically updates the user’s business unit based on the ID fetched from the list of business units, allowing for automated reassignments in response to organizational changes.

Assigning a Security Role to a User

Step 1: List Security Roles with a Filter

1. In your flow, add a "List rows" action targeting the "Security Roles" table.
2. Apply a filter query to locate the specific role, e.g., name eq 'Sales Manager' to find the role by its name.

Important!

If your environment includes multiple Business Units, incorporating a filter for Business Units becomes essential. This step ensures that you target the specific Business Unit relevant to the security role you're assigning. Understanding the intricate relationship between Business Units and Security Roles is crucial for accurate role assignments and effective access control. For a deeper insight into this relationship and how it influences security role assignments, refer to Understanding the Relationship Between Security Roles and Business Units in Dynamics 365. 

Use "Compose" action to get the specified security role record.

Step 2: Relate the User to the Security Role

1. Following the role listing, add a "Relate rows" action.
2. Set "Table name" to "Users" and specify the user’s "Row ID".
3. For "Relationship", select "systemuserroles_association".
4. In "Relate with", use the security role ID obtained from the "Compose" action.
5. 
   
   
   

This process effectively assigns the specified security role to the user, leveraging the power of Power Automate to manage user permissions efficiently.

Conclusion

Automating the assignment of business units and security roles in Dynamics 365 using Power Automate not only saves time but also reduces the risk of manual errors, ensuring that your organization's data access controls remain robust and responsive to change. By following the steps outlined above, administrators can streamline user management tasks, allowing them to focus on higher-value activities that drive business success.