Setting up manager hierarchy security using AAD

[zuleika_v]

Hi,

I'm wondering if it's possible to use the manager hierarchy security and have the users managers set through AAD? It seems like a lot of work to have to manually maintain a user's manager within power platform when it's already being done through AAD. I wasn't able to find anything on whether this is possible, and it doesn't look like users are created in power platform with the manager field populated.

[DeviKrishna · Accepted solution]

Hi @zuleika_v ,

No its not possible to set the manager from office 365.

You can go to admin power platform ->Choose the environment->click on Hierarchy Security.

You can create Manager Hierarchy from here.

-------------------------------------------------------------------------
If I have answered your question, please mark your post as Solved.
If you like my response, please give it a Thumbs Up.

My Blog: Dynamics 365 Key Topics – https://d365topicsbydk.com/

My YouTube Channel : https://www.youtube.com/channel/UCxSIryP2ah2VpEFr-Z72t1A

Regards
Devi

[zuleika_v]

Hi @DeviKrishna 

Thanks for your reply! I guess that clears it up. We don't want to manually maintain the manager structure within power platform as well as in office 365. We will just have to bench this for another time.

Thanks so much for taking the time to rely.

[NatiTurts]

Hi @zuleika_v .

I've just come across the same issue and have fortunately found a solution.

The Manager Hierarchy Model in Dataverse is based on the "Users" table, which is different from the the Entra ID (AAD) table. 

In my problem, I had an MDA that allowed users to associate a Line Manager to another user. The Line Manager field was a lookup to the Entra ID table and the user record was associated with the users Entra ID account as well. . When a Line Manager was added or changed, as you mentioned above, it needs to update the Manager in the Manager Hierarchy Model. In my scenario, I'm dealing with 900+ users, so managing them manually would be a nightmare.

My solution was to build a flow that monitored my custom user table and when a line manager was added or changed, To my benefit, I was starting with both the user and their managers IDs in the MDA anyways. I would query the Users table for both the user and the line manager. Once I got the ID's for each record from the User table, I could then update the record in the user table as needed. 

Just a heads up, the Manager field in the Users table (the table that feeds the Manager Hierarchy Model) is a lookup field. So you need to use the following syntax to pass the retrieved managers record ID into that column when updating, /systemusers(ManagerRecordID). Its just defining the table logical name required for updating lookups. 

The flow worked for me and is now keeping my MDA table of line managers synced with the Hierarchy Model. 

I also created a quick manual flow that queried all users in Office365, retrieved their managers, and then queried their individual User ID stored in the User table. With an apply to each, I updated all the Managers in the User table in one go directly sources from AAD. 

Hope this helped.