Azure Synapse Link Roles

Question

Azure Synapse Link Roles

Manuel Alejandro Estrada Doñes 20

Hi Team

I have a Synapse Link With F&O now we are transitioning to Production, but all the UAT process has been made with SysAdmin permissions on the Power Platform Environment, I tried to find documentation about the roles but can't find anything, could you please let me know where i can find this documentation the idea is set some role different to Sys Admin in th environment but that this role can add tables in case is need it.

Regards.

Ganesh Gurram 4,965 Reputation points Microsoft External Staff

2025-03-12T04:35:47.96+00:00

@Manuel Alejandro Estrada Doñes

Just checking in to see if the below answer helped. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Power Platform 0 Reputation points

2025-03-12T19:58:45.3033333+00:00

Hello Ganesh,

I have a similar requirement.

Thank you for explaining and providing steps. Could you please elaborate on the below like provide entities names.

Data Management Permissions - Users should have permissions to access the Data Management workspace to manage data entities and tables.

As you mentioned limited permissions on system administration settings. Could please provide the entity name and what type of permissions they need like create, read, write, append, append to we need to enable.

System Administration Permissions - Limited permissions to access system administration settings may be necessary, especially for enabling features like change tracking on tables.

Appreciate your help! if you could answer my questions.

Will wait for your response.

Thank you!

1 answer

Your answer

Ganesh Gurram 4,965 Reputation points Microsoft External Staff

2025-03-12T04:35:47.96+00:00

@Manuel Alejandro Estrada Doñes

Just checking in to see if the below answer helped. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Power Platform 0 Reputation points

2025-03-12T19:58:45.3033333+00:00

Hello Ganesh,

I have a similar requirement.

Thank you for explaining and providing steps. Could you please elaborate on the below like provide entities names.

Data Management Permissions - Users should have permissions to access the Data Management workspace to manage data entities and tables.

As you mentioned limited permissions on system administration settings. Could please provide the entity name and what type of permissions they need like create, read, write, append, append to we need to enable.

System Administration Permissions - Limited permissions to access system administration settings may be necessary, especially for enabling features like change tracking on tables.

Appreciate your help! if you could answer my questions.

Will wait for your response.

Thank you!

Answer 1

Hi @Manuel Alejandro Estrada Doñes

To manage Azure Synapse Link for Dynamics 365 Finance and Operations (F&O) without granting full System Administrator (SysAdmin) permissions, you can assign specific roles that provide the necessary access to add tables while maintaining security. Here's how you can achieve this:

To add tables in Azure Synapse Link for Dataverse, users need specific permissions in both the Power Platform environment and the Dynamics 365 F&O environment:

Environment Maker Role - This role allows users to create resources within an environment, including connections and gateways, which are essential for configuring Azure Synapse Link.

Data Management Permissions - Users should have permissions to access the Data Management workspace to manage data entities and tables.

System Administration Permissions - Limited permissions to access system administration settings may be necessary, especially for enabling features like change tracking on tables.

For tables to be available for selection in Azure Synapse Link, change tracking must be enabled:

Verify Change Tracking - Ensure that change tracking is enabled for the tables you intend to sync. This can be done in the Dynamics 365 F&O environment under System Administration > Setup > System parameters > Database.

SQL Row Version Change Tracking - Starting from Dynamics 365 F&O version 10.0.39, the SQL row version change tracking configuration is enabled by default. However, it's advisable to verify this setting. If needed, re-enable it by navigating to System Administration > Setup > License configuration, unchecking and then rechecking the 'Sql row version change tracking' option, and saving the changes.

Instead of granting SysAdmin permissions, consider assigning the following roles:

Create a custom security role that includes the necessary privileges to manage data entities and enable change tracking. Assign this role to users responsible for configuring Azure Synapse Link.

Assign the Environment Maker role to users in the Power Platform environment to allow them to set up and manage Azure Synapse Link configurations.

For detailed guidance on setting up and managing Azure Synapse Link with Dynamics 365 F&O, refer to the following resources:

By assigning these specific roles and ensuring necessary configurations, you can securely manage Azure Synapse Link for Dynamics 365 F&O without granting full SysAdmin permissions.

Hope this helps. Do let us know if you have any further queries.

Share via

Azure Synapse Link Roles

1 answer

Your answer