Auto changing of Business Unit to users added to Entra Security Group

(2) Share

Report

Posted on by powerwithgaurav16

Background:

I have shared a Power App with Azure Entra Security Group and applied a custom security role while sharing.

The security role assigned to Entra Security Group has privilege defined as "Business Unit" and not Organisation.

I have also changed the business unit of the associated Entra Security Group Team to a child BU in PPAC.

When users are added to Entra Security Group they are created in root business unit by default.

Microsoft documentation says the same.

Link for above screenshot: https://learn.microsoft.com/en-us/power-platform/admin/manage-group-teams

Issue:

Since user is created in root business unit so the records created by the user in dataverse get root business unit as Owning Business Unit.

My assumption was that since I have changed the BU of Entra Security Group Team in PPAC so user will be created in child BU and not root BU.

Question:

Is there any way that business unit of users added to Entra Security Group is changed to child BU automatically which is the BU of Entra Security Group Team in PPAC?

Thanks
Gaurav

Categories:

Governance & administering

I have the same question (0)

All responses (2)

Answers (0)

Suggested answer

Michael E. Gernaey 53,351 Super User 2025 Season 2 on at

Like (0)

Report

Hi @powerwithgaurav16

You could setup a triggered flow where when someone is added to the security group the flow would trigger. you could than change their BU if that is what you desire.

Please take a look at these articles and let me know if you have more questions.

Act on group membership changes in Azure Active Directory - JanBakker.tech

.: Dynamically Assigning Business Units and Security Roles in Dynamics 365 with Power Automate

If this helps resolve your Issue, please let mark as such and maybe a like

Let me know if you have specific questions.

Was this reply helpful? Yes No
powerwithgaurav16 2 on at

Like (0)

Report

Hi @Michael E. Gernaey

Thanks for the reply.

But I think they are related but do not solve my particular issue.

First article is about M365 group not Entra Security Group.

Second article does deal with business units but it in in context of Dynamics 365. Also this article deals with business unit in isolation whereas I am looking for something which also includes Entra Security Group.

Please correct me if I have missed anything.

Thanks
Gaurav

Was this reply helpful? Yes No