|
|
(2 intermediate revisions by one other user not shown) |
Line 1: |
Line 1: |
− | <translate>
| + | #REDIRECT [[Microsoft-dynamics-365-integration-guide/Configuration/EnableScenariosAccessDynamics365]] |
− | = Configure Microsoft Azure and Dynamics 365 CRM for Web API access =
| |
− | | |
− | == Step 1: Add new registered app ==
| |
− | # In the ''Azure Portal > Azure Active Directory > App Registrations'', click '''+ New registration''' to add a new registered app.<br /><br>
| |
− | # View the registered app and click '''Settings'''.<br /><br>
| |
− | # Then click '''Properties''', and edit the properties with the following values:<br /><br>
| |
− | ## '''Application type''' - Web app / API<br /><br>
| |
− | ## '''Application ID''' - The Client ID<br /><br>
| |
− | ## '''Object ID''' - This ID will be filled in for the registered app<br /><br>
| |
− | ## '''Home page''' - http://localhost [Note: use exactly this value as it also will be hardcoded in the Azure Portal]<br /><br />[[File:MS365-11-53.png|800px|thumbnail|center|App registration fields]]<br /><br>
| |
− | | |
− | == Step 2: Add API access ==
| |
− | # In the newly created app, go to '' Settings > API Access > Required Permissions'' and click '''Add''' to add API access.<br /><br>[[File:MS365-12-53.png|800px|thumbnail|center|Add API access]]<br /><br>
| |
− | # In ''Add API access'', make the following selections:<br /><br>
| |
− | ## In ''Select an API'', select '''Dynamics CRM Online'''.<br /><br>
| |
− | ## Select the checkbox for '''Delegated Permissions'''.<br /><br>
| |
− | ## When done, click '''Grant Permissions''' and click '''Yes'''.<br /><br>
| |
− | | |
− | == Step 3: Get the key (the Client Secret) and endpoint ==
| |
− | # In the newly created app, go to ''Settings > API Access > Keys'' and:<br /><br>
| |
− | ## In ''Description'', name the app key.<br /><br>
| |
− | ## In ''Expires'', set '''Never expires'''.<br /><br>
| |
− | ## Click '''Save'''. Once saved, the key value will be shown. The key value is the ''Client Secret'', which you need for later configuration steps.<br /><br>
| |
− | ## '''Copy the key value now''' because this is the only moment you can see the actual key.<br /><br>[[File:MS365-13-53.png|800px|thumbnail|center|The key is the Client Secret]]<br /><br>
| |
− | # Go back to ''Azure Active Directory > App Registrations'' and click '''Endpoints'''.<br /><br />
| |
− | # Copy the '''OAUTH 2.0 Authorization Endpoint''' and '''OAUTH 2.0 Token Endpoint''' values.<br /><br>[[File:MS365-14-53.png|800px|thumbnail|center|OAUTH 2.0 endpoint values]]<br /><br>
| |
− | | |
− | == Step 4: Update security roles ==
| |
− | # Open the Dynamics 365 CRM (not Azure) application, and at the top of the page, click on a drop-down link, which will bring up a number of menu items. Click on ''Settings > Security > Security Roles''.<br /><br />[[File:Dynamics-Settings-Security-53.PNG|800px|thumbnail|center|Settings]]<br /><br />
| |
− | # Add new role (or copy existing role).<br /><br />
| |
− | # Make sure the role has required privileges (the screenshot shown only grants access to the Account CRM object).<br /><br />[[File:MS365-15-53.png|800px|thumbnail|center|Role assignment]]
| |
− | | |
− | == Step 5: Add app users ==
| |
− | # Go to ''Settings > Security > Users''.<br /><br>
| |
− | ## Switch view to '''Application Users'''.<br /><br>[[File:MS365-16-53.png|800px|thumbnail|center|Application Users view]]<br /><br>
| |
− | # Add new user.<br /><br>
| |
− | ## Once new user form is shown, change it to '''Application User'''.<br /><br>[[File:MS365-17-53.png|800px|thumbnail|center|User account information]]<br /><br>
| |
− | # In ''Account Information'', fill in the following:<br /><br>
| |
− | ## '''User Name'''<br /><br>
| |
− | ## '''Application ID''' - Your application ID (i.e., the Client ID)<br /><br>
| |
− | # In ''User Information'', fill in the following:<br /><br>
| |
− | ## '''Full Name''' - User's first name and last name<br /><br>
| |
− | ## '''Primary Email''' - User's email address<br /><br>[[File:MS365-18-53.png|800px|thumbnail|center|Completed New User record]]<br /><br>
| |
− | # Save the record. At this time, the '''Application ID URI''' and '''Azure AD Object ID''' fields are filled in.<br /><br>[[File:MS365-19-53.png|800px|thumbnail|center|Save user record]]<br /><br>
| |
− | | |
− | == Step 6: Add roles to the users you created ==
| |
− | # Click '''Manage Roles'''.<br /><br>
| |
− | ## In ''Manage User Roles'', add the custom role created to that user.<br /><br>[[File:MS365-20-53.png|800px|thumbnail|center|Manage User Roles]]<br /><br>
| |
− | | |
− | | |
− | This completes Microsoft Dynamics 365 CRM and Azure configuration.
| |
− | | |
− | | |
− | | |
− | </translate>
| |