Opt-Out of Automatic License-Based User Roles Management

(0) Share

Report

Posted on by kbirstein

128

Does anybody have any examples of what "Opt-out of automatic license-based user roles management", https://learn.microsoft.com/en-us/power-platform/admin/opt-out-automatic-license means? Once it's turned off it can't be turned back on so of course we're afraid to do it. What is an example of a user role that is automatically assigned based on a license? It it only for Dynamics 365 apps? The extremely short documentation page says that for the Default environment, Environment Maker and Basic User roles will continue to be automatically assigned even after opt-out so it seems to have some scope outside of Dynamics 365. . .

All responses (1)

Answers (1)

Verified answer

velegandla 202 Super User 2025 Season 1 on at

Like (0)

Report

Re: Opt-Out of Automatic License-Based User Roles Management

@kbirstein

One such example is, when the D365 admin role is granted to a user in AAD they will get the System admin role in environments as well. User synchronization doesn't remove the System Administrator role when the D 365 admin role is removed in AAD. So, even though this user is no longer a D365 admin in Azure AD, they remain a system admin in the tenant and will be able to see all environments.

You may raise a support ticket with the MSFT team and ask for more information.