Security roles for teams and in the deployments

[Muzammil_069506]

Hello Everyone,

I have a question regarding the teams I’ve created in Dataverse. I’ve associated these teams with an AD group and assigned them a security role.

However, I’m uncertain about the deployment process. Will these teams be automatically transferred to another environment during deployment? If not, how does this process work? Any guidance would be appreciated.

@Jmanriquerios 

Thank you.

[Jmanriquerios]

Hi @Muzammil_069506 

On the one hand you have the Azure AD security roles and on the other the Dataverse security roles. To run the applications you need to configure the Dataverse security roles, by default there are already a series of security roles associated with the environment in which you are worked.

You can configure new security roles and transport these roles through a solution.

Now, each environment is independent in terms of the users who can access it, since you have configured security groups in Azure AD, and you can use different groups in each one, this is simply giving you access to the environment but not to the application.

To access the application you must associate a dataverse security role to the user. You can do this individually or through teams, but it depends on the security model you establish in your application.

https://learn.microsoft.com/es-es/power-platform/admin/wp-security

[parvezghumra · Accepted solution]

@Muzammil_069506 Security Role definitions are solution-aware and, therefore, you can include them into your solutions and deploy as normal across environments.

Team definitions, and the Security Roles associated to those Teams, are not solution-aware. So they do not move across environments with solution deployments.

You can, however, treat Teams and the Security Roles assigned to those Teams as data in Dataverse. But you would need to build custom deployment logic to move this configuration between environments. This is because the Teams live at a Business Unit level and the Security Roles at replicated at each Business Unit in the organizational hierarchy. You, therefore, need to ensure that you assign the Business Unit specific variation of each Security Role to each Team. The Dataverse tables relevant to this area are businessunit, team and teamrole

[Muzammil_069506]

Thank you so much for replying I have accepted your answer as solution I'm already connected with you over the LinkedIn very detailed explanation building the custom logic what's effort there should we go out of box?@parvezghumra 

[parvezghumra]

@Muzammil_069506 Unfortunately there's no out of the box option for this. 

Custom deployment logic will require .NET / PowerShell scripts. 

Alternatively, check if there's anything that might help in XrmToolBox