Microsoft Entra ID · M365 & Platform Services
Dynamics 365 Business Central Administrator
Accesses and performs all administrative tasks on Dynamics 365 Business Central environments.
Scope: Full administration of Dynamics 365 Business Central environments
Permissions
- Full Business Central admin access
- Manage Business Central environments
- Configure Business Central settings
- Manage Business Central users
Common use cases
- Business Central environment management
- ERP administration
- Business Central configuration
Best practices
- Use environment management best practices
- Document configurations
- Test changes in sandbox
Security considerations
- Full access to business data
- Can affect financial systems
Common questions
When should I assign the Dynamics 365 Business Central Administrator role?
Assign Dynamics 365 Business Central Administrator when you need to: Business Central environment management; ERP administration; and Business Central configuration. It is part of Microsoft Entra ID and should be granted as a least-privilege alternative to broader roles like Global Administrator.
What can someone with the Dynamics 365 Business Central Administrator role do?
The Dynamics 365 Business Central Administrator role grants permissions including: Full Business Central admin access; Manage Business Central environments; Configure Business Central settings; and Manage Business Central users. See the Permissions section above for the full list.
What are the security risks of the Dynamics 365 Business Central Administrator role?
Key considerations when assigning Dynamics 365 Business Central Administrator: Full access to business data; and Can affect financial systems. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.