Set Up Security

Backup4Dynamics requires different roles at different stages — some are needed only once during setup, one is needed temporarily while configuring the solution, and others are needed on an ongoing basis to use the product. Below is a breakdown of each role and what it enables.

Global Administrator

The Global Administrator role (or an equivalent Microsoft Entra ID role) is required only during the initial setup of Backup4Dynamics. This role is used to grant admin consent for the managed application and to complete the application setup. Once setup is complete, this role is no longer required.

System Administrator

The System Administrator role in the D365 CRM environment is required while configuring the Backup Schedule and selecting entities for backup.

Backup4Dynamics Administrator

The Backup4Dynamics Administrator role is required on an ongoing basis for all users who will operate Backup4Dynamics day-to-day. A user with this role can register the license, run backups, perform restore operations, monitor backup and restore runs, and review backup history. This role also grants organization-level access to all entities of Backup4Dynamics.

Azure Subscription Access

In addition to the D365 CRM roles above, users must have Owner or Contributor access on the Azure subscription at all times in order to perform Backup4Dynamics operations. Unlike the Global Administrator and System Administrator roles, this is not limited to setup — it must be maintained on an ongoing basis for the solution to function correctly.

Here are the steps to assign security roles to CRM users:

• Go to Advanced Settings → System → Security → Users.

• Select user → Manage security roles.

• Click on Backup4Dynamics Administrator Security Role --> Click Save.

Using Classic UI

Here are the steps to assign a security role to users.

• Go to Advanced Settings --> Settings --> Security.

• Select Users.

• Select a user --> Click on Manage Roles.

• Click on Backup4Dynamics Administrator security role --> Click Ok.