Granular administration as Dynamics 365 Business Central Administrator


Some of the functionality described in this release plan has not been released. Delivery timelines may change and projected functionality may not be released (see Microsoft policy). Learn more: What's new and planned

Enabled for Public preview General availability
Admins, makers, marketers, or analysts, automatically - Nov 2023

Business value

Administrators' access rights can be better controlled by assigning roles that exclude access to other Microsoft products.

Feature details

To date, the Dynamics 365 Administrator Microsoft Entra ID role was the most restricted role for internal and delegated users that still enables access to Business Central environments and admin center. In 2023 wave 2, we will introduce a new Dynamics 365 Business Central Administrator role that grants access to Business Central without also giving rights to other Dynamics 365 or Power Platform products—giving a more granular control over what internal and delegated users can access and administer within a tenant.

Along with introducing the Dynamics 365 Business Central Administrator role, we also provide partners with a way to grant their delegated users limited access to Business Central environments for support scenarios, without being able to administer environments from the admin center. Delegated users who are assigned the Helpdesk Administrator role as part of the granular delegated admin privileges (GDAP) relationship with a customer will no longer have access to the admin center. However, they'll still be able to access customer environments using the Delegated Helpdesk agent - Partner license configuration.

Tell us what you think

Help us improve Dynamics 365 Business Central by discussing ideas, providing suggestions, and giving feedback. Use the forum at

Thank you for your ideas

Thank you for submitting these ideas:

We listened to your ideas, along with comments and votes, to help us decide what to add to our product roadmap.