CHANGE USER BUSINESS UNIT WITHOUT REMOVING SECURITY ROLES IN DYNAMICS 365

Since the first versions of the Dynamics 365 product, the business units, users, and security roles are directly linked together and form the base of the security model in the system, where every user must belong to one business unit and must have one or more security roles assigned to him.

As you know, security roles are specific to each business unit, where a version of the security role of the root business unit will be replicated and inherited for every business unit in the hierarchy.

In addition, changing a user business unit will remove all the security roles assigned to the user from the previous business unit, and you need to reassign them manually for the new business unit.
Change business unit 1

Change business unit 2

Starting 2021 Release Wave 2 Updates, this behavior can be overridden and we can change the user business unit without removing the assigned security roles.

In this post, we will see how to change user business unit without manually re-assigning the security roles in Dynamics 365.

In order to keep the security roles of the user when changing his business unit, a new setting has been added that give you the ability to enable it and to keep the security roles after the change of business unit
  1. Import the solution Organization Settings Editor after installing it
  2. After the solution is successfully imported, open its configuration page
  3. Scroll down to the option DoNotRemoveRolesOnChangeBusinessUnit
    Change business unit 3

  4. Click Add to enable it in the system
  5. The default value is set to false
    Change business unit 4

  6. Click Edit to change the value to true
    Change business unit 5

    Change business unit 6

  7. Now in the user page, change the business unit and check the security roles
  8. As expected after updating the setting to true, the same security roles are still assigned but are the ones under the new business unit
    Change business unit 7

    Change business unit 8
  9. The setting DoNotRemoveRolesOnChangeBusinessUnit is still not available for the Dynamics 365 on-premises (checked on version 9.1.2.2)


Hope This Helps!

Comments

  1. I stumbled upon your blog recently and wanted to express my appreciation for the high-quality content you provide. Your writing style is not only engaging but also informative and well-researched. It's evident that you're deeply passionate about your topics, and that passion truly shines through in your work.

    microsoft payroll software

    ReplyDelete

Post a Comment

Popular posts from this blog

DYNAMICS 365 HOW TO HIDE RECENT RECORDS FOR LOOKUP FIELD IN UCI

SEARCH BY GUID IN DYNAMICS 365

SAVE FORM IN DYNAMICS 365 JAVASCRIPT