ADM 06 Dynamics Portal Security for Beginners About

ADM 06 - Dynamics Portal Security for Beginners

About Me § Military HR Background – 13 years § Started IT journey working with Sales. Force CRM in 2012. Transitioned to Dynamics in 2016. § 2 Years Consulting Experience § In 2019, created tailored Customer Service training content for the US Army § Certifications – MOS Specialist, Database Fundamental, Network+, Security+, and D 365 Customizations and Configurations

• Learn about the Types of Portals Objectives Click to edit • master Learn abouttitle the Types of Portal Security style • Learn How to Implement Security

2. Types of Portals 3. Intro to Security Agenda Click to edit master 4. Securitytitle layers style 5. CRM Walkthrough

What is Portals?

Portals integrates web engagement and Content Management with self service capability - ADXStudio v 7. 0 launched - April 2014 - Purchased by MSFT – 2015 - Microsoft D 365 Portals launched - July 2017 Click to edit - Allows external resources to interact with records inside of CRM master title - Allows developers to custom code to extend portals outside of CRM style - End of Support for legacy 7. 0 - August 2018 - Can enforce organizational authentication standards such as SSO and MFA - Should not be accessed by internal employees that do not have a CRM license assigned

Types of Portals

Based on the type of portal you wish to implement, different functionality is configured out of the box - CSS - (Support/Knowledgebase/Forum Subscriptions) - Partner Portal (Lead/Account/Opportunity Management Click to edit master title - Community Portal – (Ideas/Blogs) style - ESS - (Support/Knowledgebase/Azure AD) - Custom (Base Portal for maximum extensibility) - Unsupported source code is available if you don’t want to use Microsoft’s online portal.

Intro to Security

Portals Security is like an onion. It has layers!

• Authentication and Registration Who can log into the site and how? Click to edit What can they do? • master Web Page Access Control Rules title What pages can they see/edit? • style Website Access Permissions • Web Roles Security Layers Can they edit the Portal frontend? • Entity Permissions What records can they interact with?

Security Step 1 Authentication

- Local authentication uses contact records inside CRM to manage sign-in. Local vs. External - Click External to authentication edit uses third party providers master title such as Open. ID/Azure. AD/Oauth style 2. 0 - No difference in functionality between the two once signed in

Security Step 2 Registration

Admin can allow open registration, or force invite-only registrations Invite Only vs. Open Registration Under open registration, a new contact is created when someone registers. Click to edit master Under invite-only title registration, an internal user creates a contact in style CRM, then sends an invite code or email. Invitation creation and sending can be automated via workflows

Security Step 3 – Web Roles

Control Rules, Site Permissions, and record permissions The Foundation of Portals Security - Web Roles can have any number to of contacts Click edit assigned master title - style Can select a default role for authenticated users that is assigned on registration - Can select a default role

Security Step 4 – Entity Permissions

Oh CRUD! Can have varying scopes Global – access to all records Contact – access to your records Account – access to your account’s record Parent – inherits permissions from a parent entity (example: Opportunities on an account). Click to edit master title Must create parent entity permissions style before creating child entity permission Web roles can have any number of entity permissions assigned

Security Step 5 – Access Control Rules

Controls website viewing and publishing permissions -Grant Change – Allows the assigned Web Role to edit the web page. Click. Read to edit -Restrict – Only User roles given Restrict Read master title can view the web page. style Scope can be set to access only the current page, or include content for all child pages

Security Step 6 – Site Access Permission

Snippets – reusable ‘records’ that contain pieces of code that can be used in a template to quickly customize layout Allows website editors to manage additional settings Site Markers – Page placeholders used in redirects and buttons, also incl Click to edit master title Web Link Sets – Navigation trees style featured on the portal Unpublished Entities – Allows contacts to view unpublished pages and entities on the portal

CRM Walkthrough

CRM Tip of the Day #753

Training Resources Full Documentation on Configuring D 365 Portals https: //docs. microsoft. com/en-us/dynamics 365/customer-engagement/portals/administer-manage-portaldynamics-365 Legacy Portals https: //community. adxstudio. com/products/adxstudio-portals/documentation/ Power. BI on the Portal https: //docs. microsoft. com/en-us/dynamics 365/customer-engagement/portals/add-powerbi-report Configuring Authentication and Registration https: //dynamics 365 authority. com/Blog/d 365 -crm-portal-site-settings-records-specific-to-registration

Dynamics CRM Consultant Blue Horseshoe Solutions jhoffman@BHSolutions. com Thank you for attending! Click to edit Questions? master title style See Blue Horseshoe at booth 1201 or submit your questions and comments to https: //hub. bhsolutions. com/sessions