> For the complete documentation index, see [llms.txt](https://docs.inogic.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.inogic.com/backup4dynamics/set-up-security.md).
# Set Up Security
Backup4Dynamics requires different roles at different stages — some are needed only once during setup, one is needed temporarily while configuring the solution, and others are needed on an ongoing basis to use the product. Below is a breakdown of each role and what it enables.
#### Global Administrator
The **Global Administrator** role (or an equivalent Microsoft Entra ID role) is required only during the initial setup of Backup4Dynamics. This role is used to grant admin consent for the managed application and to complete the application setup. Once setup is complete, this role is no longer required.
#### System Administrator
The **System Administrator** role in the D365 CRM environment is required while configuring the Backup Schedule and selecting entities for backup.
#### Backup4Dynamics Administrator
The **Backup4Dynamics Administrator** role is required on an ongoing basis for all users who will operate Backup4Dynamics day-to-day. A user with this role can register the license, run backups, perform restore operations, monitor backup and restore runs, and review backup history. This role also grants organization-level access to all entities of Backup4Dynamics.
#### Azure Subscription Access
In addition to the D365 CRM roles above, users must have **Owner** or **Contributor** access on the Azure subscription at all times in order to perform Backup4Dynamics operations. Unlike the Global Administrator and System Administrator roles, this is not limited to setup — it must be maintained on an ongoing basis for the solution to function correctly.
Here are the steps to assign security roles to CRM users:
* Go to **Advanced Settings** → **System** → **Security** → **Users**.
* Select **user** → **Manage security roles**.
* Click on Backup4Dynamics Administrator Security Role --> Click Save.
#### Using Classic UI
Here are the steps to assign a security role to users.
* Go to **Advanced Settings** --> **Settings** --> **Security**.
* Select **Users.**
* Select a user --> Click on **Manage Roles.**
* Click on Backup4Dynamics Administrator security role --> Click **Ok**.
