Comments
While this is great for users of the system, it's not helpful for partners. There was talk two years ago to change the delegated admin partner/client request to allow business central access without providing global admin. This still has not been delivered. For so many reasons the current situation is not ideal, it even violates Microsofts own best practices for security. The issues this causes when talking to clients and addressing security related concerns is time consuming and a bottle neck to onboarding. Are there still plans to have an invite option to only get access to Business Central and more importantly the admin center??
Category: Tenant Administration
We have several clients where their IT department or their contract IT support either wouldn't or didn't want to make us Global Administrators so we could setup BC. I understand their concerns. Sometimes (contract IT) doesn't want to enable us to take their O365 or other revenue. Internal IT has policies against outside sources with Global Admin rights.
So we are stuck and have had to create non AD users to put in our vertical solution. Not ideal.
Category: Tenant Administration
This is not a feature request, but the identification of a very basic missing feature. It opposes very basic security best practices as outlined here
https://docs.microsoft.com/en-us/azure/security/fundamentals/identity-management-best-practices#use-role-based-access-control
To make it worse the admin center API is released prior to fixing that, what will customers encourage to grant global admin rights for service accounts. This is a severe architectural security flaw, that needs a fix asap.
Category: Tenant Administration
We have to be able to give an access to the Business Central Admin Center for our two IT project manager, who should administrate our business central system and our power platform. They didn't get the role global admin. As global admin they have too many permissions.
Category: Tenant Administration
Business Central Team (administrator)
Thank you for your feedback. This is a great suggestion! We are adding it to our roadmap.