Invite users with Azure Active Directory B2B collaboration

Applies to Dynamics 365 (online), version 9.0

You can invite other users to access your Dynamics 365 (online) instance. The Office 365 Global admin can do this through the Azure portal. Invited users can access your Dynamics 365 (online) instance using their own login credentials once a Dynamics 365 license and a security role are assigned to them. You don’t need to create a new user account and temporary password for these invited users in your own Office 365 tenant.

Requirements

  • To send business-to-business (B2B) user invitations, you must have an Azure Active Directory Global admin role.

  • To bulk- invite users, get the latest Azure Active DirectoryPowerShell which can be downloaded from the PowerShell module's release page.

Incompatibilities

The following Dynamics 365 features are not supported for B2B invited users.

  1. Unified Service Desk client

    Invited users will not be able to use the Unified Service Desk client to log into the host tenant’s Dynamics 365.

  2. Dynamics 365 App for Outlook

    Invited users will not be able to use their own tenant email addresses when performing email related transactions in the host Dynamics 365 instance. Server-side synchronization of invited users’ incoming and outgoing emails are not supported as there can be complications, especially for invited users who are already syncing their emails in their own Dynamics 365 tenant.

  3. Invited users cannot perform email activity using their own email address. Dynamics 365 (online) only synchronizes incoming and outgoing emails from Microsoft Exchange Online that is hosted in the same Office 365 tenant.

  4. Office 365 Groups

    Office 365 Groups for Dynamics 365 connects a group to Dynamics 365 (online). Data (including new conversations and documents) are stored in the Exchange and/or SharePoint system. Since invited users belong to a different Office 365 tenant, the invited users do not have permission to create Office 365 Groups in the invited-to Office 365 tenant. However, they can participate in the Office 365 Groups conversations as a guest in their Outlook Inbox, but not within Dynamics 365 (online).

Invite a user

You can add users to Dynamics 365 through Azure Active Directory B2B user collaboration. Global admins and limited admins can use the Azure portal to invite B2B collaboration users to the directory, to any security group, or to any application.

Admins can use one of the following methods to invite B2B users to their Dynamics 365 instance:

  1. Invite users to your Dynamics 365 instance that has a security group.

  2. Invite users to your Dynamics 365 instance that does not have a security group.

  3. Bulk-invite guest users using a .csv file.

    Your invited user will receive an email invitation to get started with B2B user collaboration.

    Email invitation sent to new user

    When your user accepts the invitation by clicking on the Get Started link on the invitation email, they will be prompted to accept the invitation.

    Accept the invitation to Dynamics 365

Note

Until you add a license to the user account, the user will not have access to Dynamics 365 (online). Follow the steps below to add a Dynamics 365 license through the Azure portal.

Update user’s name and usage location

To assign a Dynamics 365 (online) license, the invited user’s Usage location must be specified. Admins can update the invited user’s profile on the Azure portal.

  1. Go to Azure Active Directory > Users and groups > All users. If you don't see the newly created user, refresh the page.

  2. Click on the invited user, and then click Profile.

    User Profile button in Azure Active Directory

  3. Update First name, Last name, and Usage location.

    Update Azure Active Directory user profile

  4. Click Save, and then close the Profile blade.

Assign invited users a Dynamics 365 license and security role

Assign your invited users a Dynamics 365 (online) license and security role so the user can use Dynamics 365.

  1. Go to Azure Active Directory > Users and groups > All users. If you don't see the newly created user, refresh the page.

  2. Click on the invited user, and then click Licenses.

    Assign a license with the Azure portal

  3. Click New or Add buttonAssign.

  4. Click Configure required settings.

  5. Select the Dynamics 365 product to license.

    Click Assign to see the list of licenses

  6. Click Select, and then click Assign.

    Next, assign the invited users with appropriate security roles for the Dynamics 365 instance so they can access it. See Create users and assign Dynamics 365 (online) security roles.

Update invited user’s email address in the invited-to Dynamics 365 instance

If you're using a version prior to Dynamics 365, you need to update the invited user’s email address. In Dynamics CRM, go to Settings > Security > Users. Select a user, and then update the invited user’s email address.

Approve email or enable mailbox (not supported)

Since server-side synchronization is not supported, Dynamics 365 System admins cannot approve an invited email address or mailbox since emails cannot be synced from the invited user’s Microsoft Exchange.

Notify your invited users

To complete the user invitation, notify your invited users and provide them with the URL for the instance they are invited to (for example, https://contoso.crm.dynamics.com).

See also

Azure AD B2B Collaboration is Generally Available!
Azure Active Directory B2B collaboration code and PowerShell samples
Azure Active Directory B2B collaboration frequently-asked questions (FAQ)
Azure Active Directory B2B Collaboration
Azure AD B2B: New updates make cross-business collab easy