Skip to content
Pattern Header (1)

Understanding GDAP for Business Central partners

Security and control are top priorities for businesses using Microsoft Dynamics 365 Business Central. That’s why Microsoft introduced Granular Delegated Admin Privileges (GDAP): a major improvement in how partners access customer environments. At TVT, we help clients navigate this change with confidence. 

 

What is GDAP? 

GDAP (Granular Delegated Admin Privileges) is a security feature in Microsoft Partner Centre that gives partners time-bound, least-privileged access to customer environments. It replaces the older model where partners were granted Global Admin rights, often raising concerns about excessive access. 

 

Why GDAP Matters 

With GDAP, partners can still support Business Central environments effectively, but with reduced access to other workloads in Microsoft Entra ID (formerly Azure Active Directory). This means better security, more transparency, and greater peace of mind for customers. 

 

What Access Do Partners Get? 

Partners can request access for two specific roles: 

  • Dynamics 365 Administrator 
  • Helpdesk Agent  

These roles provide the necessary permissions to: 

 

  • Access the Business Central Admin Centre 
  • Maintain environments and apply updates 
  • Create and manage sandbox environments 
  • View telemetry and performance data 

How TVT supports you 

At TVT, we ensure your Business Central environment is secure, supported, and optimised. We guide you through the GDAP setup process, explain what permissions are being granted, and help you maintain full control over your data. 

What to know how to find out more about GDAP and how it relates to your Business Central environment? Contact TVT today to find out how we can help. 

Frequently Asked Questions

What is GDAP? GDAP stands for Granular Delegated Admin Privileges. It allows Microsoft partners to access customer environments with limited, time-bound permissions.
Why is GDAP better than Global Admin rights? GDAP reduces the risk of overexposure by limiting partner access to only what’s needed for Business Central support.
Will my partner still be able to support my Business Central environment? Yes. GDAP provides access to the Business Central Admin Centre and necessary tools without compromising other areas of your tenant.
Do I need to approve GDAP access? Yes. Customers must explicitly grant GDAP access to their partners via Microsoft Partner Centre.
How does TVT help with GDAP setup? TVT walks you through the process, explains each permission, and ensures your environment remains secure and well-managed.

RELATED ARTICLES