“This is a login REMINDER for Dynamics 365. Kurt Hatlevik has not logged into for at least 25 days. Your last login was 2/20/2020 12:10:00 AM. Login to Dynamics 365 is required at least once within a 30 days window or your account may be deactivated without notice. Please login within the next few days to ensure access is maintained.
Reactivation will require user administrator approval and will be dependent upon license availability.”
This would make the system more secure, and it will also free up licenses for users that are actually not using the system.
Comments
I didn't test it, but I think it possible to utilize the SysUserLog table. Then it is possible to write a Power Automate flow that is scheduled to run weekly. This flow is going to generate some kind of report and/or actions.
Unfortunately, One thing that is missing is the SysUserLog data entity. Probably this data entity is supposed to be read-only.
Category: System administration
This would be a great feature also in our organization. It needs however to be highly configurable. Responsible system administrator needs to be able to set:
* If reminders should be sent to the users prior to automatic deactivation due to inactivity and in that case how many days before deactivation the reminder should be sent out.
* The text in the reminder message to the user.
* If a notification of the made deactivation should be sent to the user and in that case which text to send.
* If the user's security roles should be removed at automatic deactivation or not.
* If licenses should be released at deactivation and in that case which Azure Active Directory user groups are relevant for each license type.
Category: System administration
The idea will work for some companies/users, but not all. At least, it should be configurable to send these mails to users and remove licenses automatically or not. In my opinion, it is the task from HR and system administrators to have an updated list of active employees and if they should use the system or not. HR should inform the system administrators which workers are newly hired and which contracts were ended. Probably even people switched positions and don't require a login anymore. They should be excluded from these mails.
Note that currently all Odata actions are not logged as user log in MSDyn365FO. If they are using Power Apps or Power Automate, then the email might be incorrect. I haven't checked if the Windows event or other telemetry is able to capture this already.
There are also users which do have a team member license to be able to do some actions on ESS or Expense management which they will not use every month.
Also consider the scenario where a user receives the mail. Does a login as it was stated in the mail, but is not using any part of the system. Then this alert might against the purpose.
So a configurable option, but also the X days should be configurable then. Not just disable in any case.
In my opinion, better insights for a system administrator should have higher priority. He should be able to have insights in usage of the system and performs the checks with HR if the licenses could be reduced. This insights should then include all Odata login logs. But probably, this should be on a higher level instead of only MSDyn365FO.
Category: System administration
Great idea, must have for an ERP-System like D365FO
Category: System administration