Manage security across multiple environments
You can package and move security roles and Column Security Profiles from one environment to the next by using Dataverse solutions.
However, you need to create and manage business units and teams in each environment and assign users to the necessary security components.
Configure the users' environment security
After you create roles, teams, and business units in an environment, you can assign users with their security configurations.
When you create a user, associate the user with a business unit. By default, this business unit is the root business unit in the organization. The system also adds the user to the default team of that business unit.
Assign security roles that the user needs and/or add them as members of certain teams. Remember, teams can also have security roles, and the effective rights of the user is the combination of directly assigned security roles with those of any teams that the user is a member of.
Additionally, if you use column-level security, you need to associate the user, or a team of the user, to a Column Security Profile that you created.
Because of its complexity, establishing a security plan is best accomplished as a joint effort between the application makers and the team that's administering the user's permissions. Make sure that you coordinate major changes well in advance of deploying the changes into the environment.