Removing Business Units from Security Role Assignments

In one of my previous blogs on Business Units you might have noted how the business units play an important role in designing the security model of an organization and how its pretty useful. If you have not, please check the same here. Now to make the security model more flexible, Microsoft has come up with a strategy to take out business unit from the security mode to simplify the whole security model from business unit perspective and for the ease of use. It is yet to be released as part of the 2021 wave 1 release plan. Official documentation can be found here or below is the details which is available in that page.

So what business value it brings to the table? This brings in ease of use and simplifies the business unit security model. By decoupling a user’s business unit from their security role’s business unit, they can be assigned security roles from different business units. This allows the user to access the respective business units without the need to create and join the owner team.


Business Units in Dynamics 365

Businesses across the world are always divided into multiple departments or divisions for the administrative purposes from older times. Each of these divisions or departments work in their own way with their processes, products, customer and so on. In some organizations, we could find overlap or collaborations between these divisions or departments which is quite obvious. When we think about setting up a system for an organization, we need to consider all these aspects as its quite possible that depending on how the organizations works through collaborations the data accessible for users from one division or department might not be accessible for users from different department or they might only have read access to the data but not able to make any changes to the data. Being said that when we plan for a security architecture for the system these thoughts should be considered. The best way of implementing this would be to first logically groupings all these related activities together and then provide users access to each of these groupings depending on what they can access and what they can change. Dynamics 365 offers an option for this via Business Units. Business Units are the logical grouping or related business activities. In this blog, we will discuss about this capability in Dynamics 365.

Continue reading “Business Units in Dynamics 365”