Edit

Step 8: Clean up after a Salesforce migration (preview)

[This article is prerelease documentation and is subject to change.]

After your migration is complete, revoke the access credentials you granted during setup and remove any data you no longer need from Dynamics 365 Activate. This article describes the cleanup steps for each component.

Important

  • This is a preview feature.
  • Preview features aren’t meant for production use and might have restricted functionality. These features are subject to supplemental terms of use, and are available before an official release so that customers can get early access and provide feedback.

Revoke Salesforce access

Deactivate or delete the Salesforce External Client App that you created for discovery and migration after the project is complete.

  1. In Salesforce Setup, search for and open External Client App Manager.
  2. Find the D365 Migrate Discovery app (or whatever name you gave it).
  3. To temporarily disable access, open Policies, turn off Client Credentials Flow, and save.
  4. To remove access entirely, delete the app from External Client App Manager.

You can also deactivate the dedicated integration user you created for the migration to prevent any further API access by using those credentials.

Revoke Dynamics 365 access

Remove the Azure app registration and application user that the application used to connect to your Dynamics 365 environment.

  1. Remove the application user from Dynamics 365:

    1. Go to Power Platform Admin Center.
    2. Select your environment > Settings > Users + permissions > Application users.
    3. Find and delete the application user created for the migration.

  2. Delete the client secret from Azure:

    1. Go to the Azure portal.
    2. Navigate to Microsoft Entra ID > App registrations.
    3. Open the app registration used for the migration.
    4. Go to Certificates & secrets and delete the client secret.

  3. Delete the app registration (if you no longer need it):

    1. In Azure portal > App registrations, select the registration and delete it.

Delete migration data from the application

To permanently remove all data stored in Dynamics 365 Activate for your account:

  1. Select your name in the top-right corner of the application.
  2. Select Delete All My Data.
  3. Confirm the deletion.

This action permanently removes all your projects, credentials, discovery results, object mappings, and migration history. For compliance purposes, only a summary audit record that contains no personal data is retained.

To delete a single project without removing all account data:

  1. Open the project.
  2. Go to Settings.
  3. Select Delete Project and confirm.

Clean up Bring Your Own Storage (if configured)

If you configured Bring Your Own Storage (BYOS), remove the access grant from your storage account:

  1. Open your storage account in the Azure portal.
  2. Select Access Control (IAM).
  3. Find the role assignment for Dynamics 365 Activate service principal.
  4. Select Remove to revoke access.

You can then delete the sf2dv-staging container or the storage account itself if you no longer need it.

Data lifecycle reference

The following table summarizes how long the application retains different types of data and how it removes them.

Data type Storage Retention How it's removed
Staging blobs (migration data) Azure Blob Storage Cleared at start of next run (success); within 24 hours (failed or stopped run) Automatic
Migration metadata (discovery results, mappings, run history) Azure SQL Project lifetime User-initiated or admin
Credentials Azure SQL (encrypted) Project lifetime or 28 days of inactivity Automatic, user-initiated, or admin
Application logs Application Insights 30 days Per workspace policy
Audit trail Azure SQL Indefinite (no personal data) Not deleted
  • Last updated on