Unanswered

Managing security using Entra ID (Azure AD) groups

(0) Share

Report

Posted on by BusyIntelligence

321

Hi, I have a question on managing security based on Entra ID (Azre AD) groups.
We have two types of security groups in Entra ID:
- Groups BU-1, BU-2, BU-3 etc. Those refer to the Business Unit a user works
- Groups JB-Managers, JB-OfficeEmps, JB-Engineers. Those refer to the job a user has

In the Power Platform I want to use these two groups to manage user access.
A user who is member of groups BU-1 and JB-Engineers should be assigned to the proper Business Unit and should get the proper security roles assigned.
Do you think this can be done? I've read about setting up Dynamics Teams associated with Entra ID groups, but the examples I see are all based on 1 Entra ID group and not 2 Entra ID groups.

Any advise on this is very welcome!

Kind regards,
Maurits

Categories:

Governance & administering

All responses (2)

Answers (0)

Sort by

joe_hannes_col 1,843 Super User 2024 Season 1 on at

Like
a
(0)

Report
Copy link

Link copied!

Hello @Maurits,
Not quite sure if I get what you want to achieve.
The groups BU-1, BU-2, etc., would be used to assign users to a business unit, right?
And the Groups JB-Managers etc. would be used to assign a security role?
It is my understanding you would have to create sub-teams under the business units if you want to assign different security roles, see here.
Using a matrix-like assignment of security roles would not work because the groups always have to be associated with a business unit.
BusyIntelligence 321 on at

Like
a
(0)

Report
Copy link

Link copied!

Hi @joe_hannes_col , thanks for thinking with me. And yes, you understand what I try to accomplish correctly.
I know about the subteams and I think, if I manage security within the Power Platform itself, I know how to establish it.
But now I try to manage it by security groups in MS Entra ID/Azure AD. That makes it harder, if not impossible I'm afraid.