Register the Dynamics 365 app with Microsoft Azure Active Directory (AD).
When you finish registering the app, record the Application ID and Directory ID. When you finish creating the client secret, record it. You need to enter these values when you add the app to the Commvault Cloud software.
Note
-
Disclaimer: This procedure is performed using the Microsoft Azure Active Directory (Azure AD) Web application. The Azure AD application is subject to change without notice. Consult Microsoft documentation. For example, see Azure Active Directory Documentation.
-
For Dynamics 365 apps, you must ensure to follow the below best practices to enhance security.
-
Users must create a Microsoft Conditional Access Policy to limit app access.
-
Users must change their client secret every 90 days in the Azure portal and then update the new client secret value in the Command Center. You must also delete the previous client secret from the Azure portal.
-
Log On to the Azure Portal as the Global Administrator
-
Log on to the Azure portal (https://portal.azure.com/) using your global administrator account.
-
Go to Azure Active Directory.
Register the Azure App
-
In the navigation pane, click App registrations.
-
Click New registration.
-
In the Name box, enter a name for the app.
-
Under Supported account types, select Accounts in this organizational directory only (<dynamics_365_tenant_prefix> - Single tenant).
-
Under redirect URI, set the value in the following format:
https://<host_name.domainname.com>/commandcenter/processAzureAuthToken.do
This format is required to authorize and verify the status of the Azure app from the Command Center.
-
Click Register.
-
Copy the following values, and paste them into a file or other document that you can access later:
-
Application ID
-
Directory ID
You will enter these values in the Commvault Cloud software when you create the Dynamics 365 app, as well as on the Microsoft Power Platform admin portal where the application user is configured.
-
Request and Grant Permissions for the Azure APIs
-
In the navigation pane, click API permissions.
-
Click Add a permission.
-
Click Microsoft Graph, and then complete the following steps:
-
Click Application permissions.
-
Select the following permissions:
-
Application: Application.ReadWrite.All
-
Organization: Read.All
-
Directory: Directory.ReadAll
-
-
Click Add permissions.
-
-
On the app API permissions page, click Add a permission.
-
Select Dynamics CRM, and then complete the following steps:
-
Select Dynamics CRM, and then click Delegated permissions.
-
Select user_impersonation.
-
Click Add permissions.
-
-
On the app API permissions page, click Grant admin consent for tenant_name.
Create a Client Secret for the Azure App
-
In the navigation pane, click Certificates & secrets.
-
Click New client secret.
-
Enter a description, and then select Never expire.
-
Click Add.
-
Copy the client secret value, and paste it into a file or other document that you can access later.
You will enter this value in the Commvault Cloud software when you create the Dynamics 365 app.