Your Dataverse environment must be configured to allow the App Registration to access data. This involves creating an Application User and assigning appropriate security roles.
Required Permissions
To create an Application User and assign security roles in Dataverse, you need:
• System Administrator security role: Required to create Application Users and assign security roles within the Dataverse environment
• Power Platform Administrator or Global Administrator: Required for access to the Power Platform Admin Center to manage environment settings
💡 Note: If you have access to the Dataverse environment but cannot create Application Users, contact your Power Platform administrator to perform this configuration or grant you the System Administrator role.
Creating an Application User
- Sign in to the Power Platform Admin Center (https://admin.powerplatform.microsoft.com).
- Select your environment by selecting ‘Manage’ from the left hand navigation, then selecting ‘Environments’ and then select your environment from the Environments list.
- Click Settings in the top menu.
- Expand Users + permissions and select Application users.
- Click New app user.
- Click Add an app to search for your App Registration.
- Select your DvSchemaSync App Registration from the list.
- Select the appropriate Business Unit (as to avoid missing data, select the root business unit).
- Do not yet create the application user, you still need to assign an appropriate role.
Assigning Security Roles
The Application User needs security roles that grant read access to the tables you want to synchronize.
- From the ‘Security roles(0)’ dialog, select ‘Edit’.
- Assign one or more security roles based on your requirements:
System Administrator: Full access to all tables (use for testing only)
System Reader: Read-only access to most system tables
Custom Role: Create a role with specific read permissions for your sync requirements
- Click “Create”.
✓ Best Practice: Create a custom security role with only the minimum permissions needed. This follows the principle of least privilege and improves security.
Finding Your Environment URL
You'll need your Dataverse environment URL to configure DvSchemaSync.
- In the Power Platform Admin Center, select your environment.
- Look for the Environment URL field (e.g., https://yourorg.crm.dynamics.com).
- Copy this URL for use in DvSchemaSync.