Step 2 (OAuth): Create Microsoft Dynamics Integration User

Context

With this step, you're creating an integration user in Microsoft Dynamics to integrate with Demandbase using OAuth. 

Prerequisites

You must have Admin privileges within your Microsoft Dynamics environment.

Important: As a best practice, we highly recommend that you create a dedicated Microsoft Dynamics API user profile that Demandbase can use to synchronize with via the Dynamics API. This practice makes it much easier to manage authentication credentials in the event that the dedicated Microsoft Dynamics user leaves the company or changes roles. 

Steps: Create Security Role

The following steps applies to both single-tenant and multi-tenant Microsoft Dynamics applications. 

1. In Microsoft Dynamics, create or update a security role with the following permissions. See Microsoft’s Security roles and privileges article for instructions on how to set up roles. 
   Important: Microsoft Dynamics doesn’t allow permission changes to the System Administrator security role. You must set up a custom security role for the integration user.
   
   Minimum Requirements
   
   • Core Records tab
     • Account - Read, write
     • Activity - Create, read, write, delete, append
     • Contact - Create, read, write, append, append to
     • Lead - Create, read, write, append, append to
     • Opportunity - Read, write
     • Opportunity Relationship - Read
     • Queue - Read
     • Saved View - Read  
   • Marketing tab
     • Campaign - Read, write, append, append to
     • Marketing List - Read
   • Business Management tab 
     
     • Bulk edit - Enable
     • Currency - Read
     • User - Create, read, write, append
       

     • User settings: Read

   • Customization tab
     • Attribute map - Read
     • Entity - Read
     • Entity map - Read
     • Field - Create, read, write
     • Process: Read
     • Relationship: read
     • System job: Read
     • View - Read
2. Create a user and assign the security role from step 1. See Microsoft’s Add users and assign licenses at the same time article for instructions on how to create a new user. 
   Tip: You can also assign a security role with the above permissions to an existing user.

Steps: Create App User

1. Log in to the Microsoft Power Platform.
2. In the left menu, click Environments. At the top of the page, click Settings.
   
   
3. Click Users + permissions > Application Users. 
   
   
4. At the top of the page, click + New app user. 
   
   
5. Click + Add an app.
   
   
6. Choose the Demandbase environment. Click Add.
   
   
7. Click the Business unit drop down and choose the applicable Business Unit. 
   
   
8. Next to Security role, click the pencil icon. 
   
   
9. Choose the security role you created in Steps: Create Security Role. Click Save. 
   
   
10. Click Create.
    
    
11. You'll see a confirmation message when the new app user is successfully added.