BC Friday Tips #31 Block Users using Security Group
Happy #BCFridayTips to all #msdyn365bc consultants.
💡Want a quick way to block most users from accessing an environment?
Use the environment- level security group.
Here’s how:
➡️ Create an Azure AD Security Group on the Azure Portal (if you don’t already have one) and add only the users who need access to it.
➡️ In the BC Admin Center, assign the Security Group for the environment.
➡️ Restart the environment.
That’s it. Now, only members of the group can sign in.
Why use it?
✅ Easy to set up.
✅ Easy to reuse across environments.
This can also be used to restrict sandbox access to testers only.
Repost to help others ♻️ and follow for more tips! 🚀
One problem I ran into is adding outside users (think ISV support).
I can create a user in M365 that is not in AD, assign them a license and give them access to BC.
We use AD on prem and sync to Azure. If I add an AD group to the environment, there is no way to add a user created in M365 (not in AD) to the security group.