69
We would like to be able to give the people who manage our Business Central Tenant access to the Business Central Administration Center, but we cannot because they are not Global Admins in our network. It would be nice if another role like the "Dynamics 365 Administrator" role in Azure gave them access to it.
STATUS DETAILS
Completed
Ideas Administrator

Thank you for your feedback. This is a great suggestion! We are adding it to our roadmap.

Your help is greatly appreciated, 
Dmitry Chadayev,
PM, Microsoft 

Comments

N

While this is great for users of the system, it's not helpful for partners. There was talk two years ago to change the delegated admin partner/client request to allow business central access without providing global admin. This still has not been delivered. For so many reasons the current situation is not ideal, it even violates Microsofts own best practices for security. The issues this causes when talking to clients and addressing security related concerns is time consuming and a bottle neck to onboarding. Are there still plans to have an invite option to only get access to Business Central and more importantly the admin center??

Category: Tenant Administration

N

We have several clients where their IT department or their contract IT support either wouldn't or didn't want to make us Global Administrators so we could setup BC. I understand their concerns. Sometimes (contract IT) doesn't want to enable us to take their O365 or other revenue. Internal IT has policies against outside sources with Global Admin rights.

So we are stuck and have had to create non AD users to put in our vertical solution. Not ideal.

Category: Tenant Administration

N

This is not a feature request, but the identification of a very basic missing feature. It opposes very basic security best practices as outlined here
https://docs.microsoft.com/en-us/azure/security/fundamentals/identity-management-best-practices#use-role-based-access-control

To make it worse the admin center API is released prior to fixing that, what will customers encourage to grant global admin rights for service accounts. This is a severe architectural security flaw, that needs a fix asap.

Category: Tenant Administration

N

We have to be able to give an access to the Business Central Admin Center for our two IT project manager, who should administrate our business central system and our power platform. They didn't get the role global admin. As global admin they have too many permissions.

Category: Tenant Administration