Support Partner access

Question

Is anyone else having issues as follows:

We use Business Central SAAS, however due to the strict security policies of our ICT department who manage our O365 accounts, they are not allowing our support partner to have an O365 email account, and therefore cannot get access to support us. Has anyone else got a solution to this? Can Microsoft not issue some type of access to a designated support partner, without them having a Company email account?

Answer 1

Hi,

Thank you for sharing your question. I understand how challenging it can be when strict internal security policies prevent external partners from accessing the tools they need to support your system.

It’s completely reasonable to look for a solution that allows secure partner access without requiring your ICT department to issue an internal O365 account.

In situations like this, Microsoft typically recommends using Delegated Admin Access (DAP) or the newer Granular Delegated Admin Privileges (GDAP). These methods allow a certified Microsoft partner to access and support your environment using their own Microsoft Entra ID tenant, meaning they do not need an account in your organization. GDAP in particular offers more restrictive, time‑bound, and role‑based access, which often satisfies strict ICT security requirements while still enabling partners to perform support tasks. Your ICT department only needs to approve the relationship and assign the appropriate levels of access they don't need to create or manage partner accounts internally.

May I ask whether your support partner is already enrolled as a Microsoft Cloud Solution Provider (CSP) or registered partner, and whether your organization has previously used DAP or GDAP for other services?

Feel free to share your ICT team’s concerns, and I’d be happy to help you determine the safest and most compliant way to provide your partner with the access they need.

 

I hope this helps.

 

Best Regards,

Noel

Answer 2

Partners can have delegated access to your tenant but this provides even higher level of access than providing a user within your tenant https://learn.microsoft.com/en-us/partner-center/customers/gdap-introduction

There is an option for a delegated admin access to BC https://learn.microsoft.com/en-us/dynamics365/business-central/dev-itpro/administration/delegated-admin which looks like a better option