New Functionality In Microsoft Dynamics 365 Business Central 2023 Wave 2: Control Partner Access Per Environment

This post is part of the New Functionality In Microsoft Dynamics 365 Business Central 2023 Wave 2 series in which I am taking a look at the new functionality introduced in Microsoft Dynamics 365 Business Central 2023 Wave 2.

The ninth of the new functionality in the Governance and Administration section is Control partner access per environment.

Business Central customers with multiple environments are often working with many partners to support each environment. With this feature, customer administrators can now easily and efficiently control partner access to environments. This feature simplifies partner management by allowing administrators to assign partner tenants to each environment.

Enabled for: Admins, makers, marketers, or analysts, automatically
Public Preview: –
General Availability: Dec 2023

Feature Details

In 2023 wave 2, Microsoft are introducing new environment settings in the Business Central admin center that enable internal administrators to control which environments delegated users and multitenant apps from partner tenants can access and administer.

Internal administrators can specify the tenant IDs of partners that should be able to access each environment.

Delegated users and multitenant apps accessing or administering the environment must belong to an allowlisted tenant.

This feature is optional, and if no tenants are allowlisted for an environment, delegated users and multitenant apps will be able to access and administer the environment as they did before.

This feature only affects the use of the admin center API by multitenant apps that have been authorized within the admin center.

My Opinion

Better security is always welcome. This sounds interesting in terms of allowing an admin to limit which environments a partner can access; it makes a lot of sense as I’ve worked for clients previously supporting their UK and Ireland systems, but with no requirement to have any access to the US environment. It sounds like this enhancement will allow security to facilitate this use case to be configured.