--- title: "Connect Clarity Security to Microsoft Dynamics" slug: "microsoft-dynamics" description: "Learn how to connect Clarity Security to Microsoft Dynamics to automate your identity life cycle management and user access reviews." tags: ["application", "marketplace", "How-To", "connectors"] updated: 2023-05-03T19:22:34Z published: 2023-05-03T19:22:34Z canonical: "help.claritysecurity.com/microsoft-dynamics" --- > ## Documentation Index > Fetch the complete documentation index at: https://help.claritysecurity.com/llms.txt > Use this file to discover all available pages before exploring further. # Microsoft Dynamics This guide will teach you how to set up the connector between [Microsoft Dynamics](https://dynamics.microsoft.com/en-us/) and [Clarity Security](https://claritysecurity.io/). **Estimated time to complete:** 25 minutes If you encounter any problems, please contact your support team or [support@claritysecurity.io](mailto:support@claritysecurity.io). ## Supported Connector Capabilities ## Below are capabilities supported by the connector at this time. | **Method** | **Supported** | | --- | --- | | Provision User | Yes | | List Groups, Policies, and Roles | Yes | | Add User to Groups, Policies, and Roles | Yes | | Remove User from Groups, Policies, and Roles | Yes | | Deactivate User | Yes | | Delete User | Yes | Before You Begin: - Register an application with Azure Active Directory, which enables a user with Power Apps user account to connect to their Microsoft Dataverse environment. - Azure subscription for application registration. [Here](https://docs.microsoft.com/en-us/power-apps/developer/data-platform/walkthrough-register-app-azure-active-directory#create-an-application-registration) is an article from Microsoft that could be helpful in this process. ## How to Setup the Connector ### Step 1. Sign in to [Azure](https://go.microsoft.com/fwlink/?linkid=2083908) ### Step 2. In Azure, select Azure Active Directory On the left side and select App registration and click on New registration. ![Azure Active Directory > App registration > New registration](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202023-03-30%20at%208.26.44%20AM.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 3. In the Register an application page, enter your application's registration information: - **Name**: Clarity Security Connector - **Who can use this**: Accounts in any organizational directory (Any Azure AD directory- Multitenant) - **Redirect URI**: (not optional!) a. **Platform**: Web b. **URI**: https://[YOURCLARITYSUBDOMAIN].claritysecurity.io/application/oauthProcessCode/microsoft-dynamics ### Step 4. On the app Overview page, hover over the Application (client) ID and select the Copy to clipboard icon to be used later. Then hover over the Directory (tenant) ID and copy it for later. ![Application (client) ID and Directory (tenant) ID](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202023-03-30%20at%208.42.19%20AM.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 5. Select the Manifest tab in the manifest editor, set the *allowPublicClient** to true, and click Save. ![App Manifest](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202023-03-30%20at%208.45.29%20AM.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 6. Select the API permissions tab and click Add a permission. ![API Permissions > Add a permission](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202023-03-30%20at%208.47.11%20AM.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 7. Search for and choose Dataverse under the APIs my organization uses tab. **Note**: If "dataverse" is not found, look for the most likely options: Dynamics 365 Business Central, Dynamics CRM, Dynamics ERP, or Customer Insights. ### Step 8. Click on Delegated permissions and check all options > click Add permissions. Repeat for each API. ![Delegated Permissions for Dynamics CRM > user_impersonation is checked](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202023-03-30%20at%208.55.49%20AM.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 9. Go to Certificates & secrets and click on New client secret. ![](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202023-03-30%20at%208.58.22%20AM.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 10. Enter a description like "Clarity Connector" and an expiration date of 24 months > click Add. ![Add a client secret > 24 month expiration](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202023-03-30%20at%209.16.02%20AM.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 11. Copy the 2nd secret. **Note**: you only have one chance to copy this. You will see ***** after refreshing the screen. ![Client secrets > 2nd secret value](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202023-03-30%20at%209.18.57%20AM.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 12. The final thing you need to gather before connecting is the URL of your Dynamics 365 account. ![Custom Dynamics 365 URL](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202023-03-30%20at%209.24.22%20AM.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 13. Navigate to [Power Platform admin center](https://admin.powerplatform.microsoft.com/home) and log in. ### Step 14. Click on the Environments link in the sidebar. ![Power Platform > Environments](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202023-03-30%20at%209.27.53%20AM.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 15. In the Environments list, find your Microsoft Dynamics account and highlight it by clicking on it, and a menu will appear above it. Click the Settings button. ![Environments Settings](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202023-03-30%20at%209.30.59%20AM.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 16. Click the drop-down button for Users + permissions and click the link for Application Users. ![Settings > Application Users](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202023-03-30%20at%209.33.26%20AM.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 17. Click on + New app user. ![+New app user](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202023-03-30%20at%209.34.50%20AM.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 18. Click the + Add an app button. ![Add an app](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202023-03-30%20at%209.36.57%20AM.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 19. Search for the app you created in Step 3 and click on it. Then click the Add button on the bottom. ![Add an app from Azure Active Directory](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202023-03-30%20at%209.39.34%20AM.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 20. Select your business unit. **Note**: This should match the subdomain in the URL, as shown in **Step 12**. ![Create a new app user](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202023-03-30%20at%209.42.04%20AM.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 21. Click the pencil icon to add a security role. Scroll to find System Administrator. Click on it and then click Save. ![System Administrator Security Role](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202023-03-30%20at%209.44.29%20AM.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 22. Log into Clarity Security. ### Step 23. Click on Applications and select Marketplace. ![Applications > Marketplace](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/image-1679588491503.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 24. Scroll to find Microsoft Dynamics and click Connect. ![Microsoft Dynamics App Connector](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202023-03-30%20at%208.16.58%20AM.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 25. Fill out the Connect App form with the proper credentials. Complete the App Settings form. Details for fields common to all applications can be found in the following article: [Common App Configuration Steps](/v1/docs/common-app-steps#step-1-connect-app). - **Application**: Microsoft Dynamics - **client_id**: Paste from **Step 4**. - **client_secret**: Paste from **Step 11**. - **tenant_id**: Paste from **Step 4**. - **URL**: Paste from **Step 12**. - If you will be connecting Clarity Security to multiple Dynamics 365 environments, change the Name & Unique identifier fields to reflect the specific environments this connector is communicating with. - **Access via**: API ![Configure App Step 1 - Connect App](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Screenshot%202023-03-30%20at%208.17.11%20AM.png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 26. Fill out the App Settings form. Complete the App Settings form. Details for each field can be found in the following article: [Common App Configuration Steps](/v1/docs/common-app-steps#step-2-app-settings). ![Configure App Step 2 - App Settings](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Configure%20App%202(3).png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 27. Fill out the User Settings form. Complete the User Settings form, check the table at the top to see if any features are unsupported. Details for each field can be found in the following article: [Common App Configuration Steps](/v1/docs/common-app-steps#step-3-user-settings). ![Configure App Step 3 - User Settings](https://cdn.document360.io/2d020999-1823-4d4d-b6d2-4b52fb4a9617/Images/Documentation/Configure%20App%203(2).png?sv=2026-02-06&spr=https&st=2026-11-12T18%3A55%3A24Z&se=2026-11-12T19%3A55%3A24Z&sr=c&sp=r&sig=qKPTDz9CxFZQOqg6pAFs0osMeQD6WjITif5dEdAddw0%3D) ### Step 28. Validate Your Selections and Save. SaveClicking the Save button will trigger the first full sync for your application (even if you selected Manual syncing).  This includes Service Users, Entitlements, Service User Entitlements, Service User Attributes. ## Need Help? If you have any problems, contact your customer success team. You can also get in touch with our general support [via email](mailto:support@claritysecurity.io), open a [support ticket](https://support.claritysecurity.com/home). Our general support team is available Monday - Friday from 8:00 AM - 6:30 PM CST. ## A Service User is a user, or service account, discovered by Clarity in a downstream application. An Entitlement is an assignable permission found in a downstream application. Common examples include licenses, groups, and policies. Service User Entitlements are the pairings of users and active entitlement access in downstream applications. An attribute is a piece of information used to describe a service user, entitlement, or identity. Common examples include First Name, Last Name, Job Title, Department, etc.