Use was not found in Finance and Operations. Please ensure this user exists

[gospa]

Hi,

I have Finance and Operations application connected to the Dataverse of the power platform I'm working with. I used the steps from here to do so: https://learn.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/power-platform/admin-reference

Today, all of the sudden, I'm getting this error across all my users no matter what user role they have. I'm running out of ideas and any hints would be appreciated.

I have already:

- refreshed the virtual tables

- restarted the F&O environment

- double checked table and webpage permissions

- deleted the table permission and recreated them

- made sure the virtual table along with all the records still exist in the dataverse and are viewable from there

- made sure the user in F&O has the appropriate security roles

[SoenkeR]

I have the exact same error occuring in our Power Apps Portal environment. It seems the external portal user mapping in msdyn_externalportalusermapping is not working correctly anymore. Were you able to fix the error?

[SoenkeR]

I just found a fix for my problem.

It seems it is not ok if the user in the external user mapping has the "Dataverse Virtual entity authenticated user" role assigned as a sub role. The role has to be added directly to the user.

Maybe this will help you, too.

[gospa]

I have not found a fix myself. 

Can you explain what you mean by assigned as a sub role vs role had to be directly added to the user? These are my current roles but keep in mind that I have tried dozens of role combinations out there and none of them work. This is confusing to me because this wasn't the case at all until Feb 4, 2023.

These are my current roles:

[SoenkeR]

I had the "Dataverse Virtual entity authenticated user" role programmatically added to another custom role as a sub-role through X++ extension and that does not seem to work well with Power Apps Portal.

Did you check your "external portal user mapping" records?

[gospa]

My external portal user mapping table is currently empty. However when I initially set up the connection between D365 Finance and Operations and Power Pages and everything was working fine, I did not have to set that up anyway. I am using anonymous access method.

Referenced documentation:

https://learn.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/power-platform/admin-reference

https://learn.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/power-platform/power-portal-ref...

[arpitshri]

As per my observation, now the Power Pages communicates with the Microsoft Dataverse on behalf of Application User (Power Pages : Improved Dataverse connection using Dataverse Application User ). So please ensure that this portal application user has also been created in FinOps and given appropriate roles (same as Dataverse Application User) based on the actions it is going to perform in FinOps from Portal through Virtual Tables.

Additionally, I have also observed by these recent changes all the communication happening between Power Pages and FinOps are being done through application users only. it doesn't matter whether you have setup any user mapping in the external user mapping tables. It works without that as well. Furthermore, it also doesn't matter whether user is Anonymous or Authenticated it is still using application users to communicate with FinOps. So, being an anonymous user, you still can view the data.

We have a ticket open with Microsoft to confirm about this behaviour and want to understand about this sudden change in this integration.

Meanwhile, you can use Power Pages Web Roles and Table Permissions to manage the FinOps security in portals and configure, which table you want to give access to Anonymous users and which table you want to give access to Authenticated users.

For example: Let say, you are using Table1 and Table2 of FinOps to integrate with Power Pages using Virtual Tables. and want Table 2 can be accessed by only authenticated users and Table 1 can be accessed by anonymous and authenticated users both, then create a Table Permission for Table 1 and associate Authenticated and Anonymous web roles both with that permission. While for Table 1 create a table permission and that would only be associated with Authenticated web role.

Also, you can also create a custom Web Role called "FinOps User" and assign that role only to those Portal users whom you want to give access to FinOps tables. And make sure you associate this web role only to the table permissions created for FinOps tables.

Hope it helps!

Arpit Power Guide

https://arpitpowerguide.com

[gospa]

Hi,

I have reviewed the link you have sent and it was posted on Jan 8, 2023. Our system was working fine on Feb 3, 2023 and broke on Feb 4, 2023 without any new configurations or installations occurring. We have set up our integration user in F&O with the appropriate roles as mentioned above.

[gospa]

This is the Microsoft connector we are using. We've updated it to the latest version but sadly it is still not working for us.

[kheimanhso]

I had the same issue on a portal I haven't used for a few months. As mentioned above, for me it was related to the change in how things are accessed via the App Registration now. I think it was a back end change that broke things - even though the article was dated January 2023, they did mention they would be changing things over time. I added the App Registration for this portal to F&O as an Azure Application and my external portal user mappings started working again.

"All existing websites will be migrated to Application user over next few months as well and customers will be notified about the migration schedule for their websites through standard release notifications."