Skip to main content
C1 provides identity governance for Microsoft Dynamics 365 Business Central. Integrate your Business Central environment with C1 for unified visibility and governance over who can access Business Central and which permission sets they hold.

​
Capabilities

The connector syncs Business Central users (with display name, sign-in name, contact email, and enabled/disabled state), permission sets as roles, companies, and security groups.

​
How permission set access is modeled

In Business Central, a permission set is granted to a user for a particular company, or for every company if no company is chosen when the set is assigned. The same permission set can be assigned to one user in several companies, and each of those is a separate grant of access. To reflect that, the connector syncs a permission set assignment for each combination of permission set and company that someone actually holds — for example SUPER in CRONUS USA, Inc. Users are granted the assignment rather than the permission set itself, so an access review shows not just which permission sets a person holds but which companies each one applies in. Assignments made without a company appear under All companies — tenant-wide access, a scope shown alongside your real companies to represent access that spans all of them. Only combinations that are actually assigned are synced, so the number of assignments tracks real access rather than the number of permission sets multiplied by the number of companies. Security group memberships are synced as grants on the security group.

​
Gather Microsoft Dynamics 365 Business Central credentials

The connector authenticates to the Business Central Automation API using OAuth 2.0 with a Microsoft Entra ID app registration (client credentials flow).
You need permission to register an application in Microsoft Entra ID and to grant it admin consent for Business Central API permissions.
1
In the Microsoft Entra admin center, register a new application under Identity > Applications > App registrations.
2
Under API permissions, add the Dynamics 365 Business Central application permission API.ReadWrite.All, then grant admin consent for your tenant. If you add this permission after already granting consent once, you need to grant admin consent again — consent doesn’t retroactively cover permissions added later.
3
Under Certificates & secrets, create a new client secret and copy its value.
4
Sign in to the Business Central client (the operational app where you open a company, not the separate Business Central admin center) and search for Microsoft Entra applications. Add the registered application there as a Microsoft Entra application, and assign it at least the D365 BASIC permission set (covers everything this connector needs).
5
Copy the following values to configure the connector:
  • The Application (client) ID and Directory (tenant) ID from the app registration overview.
  • The client secret value.
  • Your Business Central environment name (for example Production).

​
Configure the Microsoft Dynamics 365 Business Central connector

Follow these instructions to use a built-in, no-code connector hosted by C1.
1
In C1, navigate to Integrations > Connectors and click Add connector.
2
Search for Microsoft Dynamics 365 Business Central and click Add.
3
Choose how to set up the new Microsoft Dynamics 365 Business Central connector.
4
Set the owner for this connector.
5
Click Next.
6
Find the Settings area of the page and click Edit.
7
Enter the Microsoft Dynamics 365 Business Central credentials:
  • Base URL: The Automation API base URL for your environment, e.g. https://api.businesscentral.dynamics.com/v2.0/Production/api/microsoft/automation/v2.0.
  • OAuth token URL: https://login.microsoftonline.com/<tenant-id>/oauth2/v2.0/token.
  • Client ID: The application (client) ID of your Entra ID app registration.
  • Client secret: The client secret value you created.
  • OAuth scope (optional): Defaults to https://api.businesscentral.dynamics.com/.default.
8
Click Save.
9
The connector’s label changes to Syncing, followed by Connected. You can view the logs to ensure that information is syncing.
Done. Your Microsoft Dynamics 365 Business Central connector is now pulling access data into C1.