0

I'm trying to find a way to import Azure AD users to Dynamics 365 Finance & Operations (D365FO).

It is possible to get all system users using this endpoint (like using Postman):

/data/SystemUsers

However, not sure how the new user could be imported from Azure AD. If I go to D365FO UI I can do this using System administration -> Users -> Import users and there is an option to add users from AAD. Is there a way to do the same using API? Looking through the web was not very helpful so far.

FH-Inway
  • 4,432
  • 1
  • 20
  • 37
Oleksii
  • 1,479
  • 1
  • 19
  • 35
  • Did you take a look at [Import users in bulk](https://learn.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/sysadmin/tasks/import-bulk-users#import-users-in-bulk)? What is the reason you want to do this using the API? – FH-Inway May 18 '21 at 16:59
  • Check this class, i may help you `SysUserMSODSImportHelper` @Oleksii – venkat pasumarti May 19 '21 at 05:23
  • The following might also be an option: https://community.dynamics.com/ax/b/axinthefield/posts/managing-dynamics-365-finance-and-supply-chain-management-security-with-azure-active-directory-security-groups – FH-Inway May 28 '21 at 19:07

1 Answers1

0

So here is the answer if someone is looking for the same - it is not possible.

If you work with SystemUsers using API - you can only select D365FO users. At the same time there is 'AccountType' attribute which tells D365 F&O what account type is it.

It can be Claims User, Claims Group, AD User or AD Group. Types starting with 'Claims' are pointing to Azure objects while AD are pointing to AD.

So when you create a new user and selecr 'ClaimsUser' as account type - D365F&O would know that this is Azure user and would do mapping. That sounds a bit 'magical', however this is how it works.

Oleksii
  • 1,479
  • 1
  • 19
  • 35