Views:

Applies to Product - Power Apps

What’s happening?
User group members are not syncing properly between Azure Active Directory and Dynamics 365. New members added to Azure groups are not appearing in the corresponding Dynamics 365 groups.
 

Reason:
This behavior is by design. The list of team members in each group team only displays user members who have accessed the Dynamics environment at least once. Additionally, new users may encounter a "Missing security role" error when trying to log in to the Model Driven App (MDA).
 

Resolution:

  1. Verify that the environment is associated with Microsoft Entra.
  2. Ensure that the user with the access issue is a member of the group associated with the environment.
  3. New users must log into the environment at least once to become visible in the group.
  4. If users are still not visible after logging in, the system administrator should run a force sync for the user. This action associates the Basic User security role with the new user, enabling them to log in and subsequently get added to the teams.
  5. If the issue persists after a force sync, gather the following information for further investigation:
    1. Recently created users who have been added to the security group and are not working after the force sync.
    2. Screenshots of the licenses assigned to the users.
    3. Network logs while the user logs in to the MDA.
    4. User Azure sign-in logs.