SaaS Onboarding - Step 4
GDAP Request from LS Retail
To support the customer, LS Retail requests access to the Business Central environments on the tenant using Granular Delegated Admin Privileges (GDAP).
This request is submitted in form of links that is provided by LS Retail.
GDAP Approval
- The customer opens the GDAP link provided by LS Retail.
- The link must be approved by a user with sufficient privileges, as a Global Administrator.
See:GDAP - granular delegated admin privileges
MS documentation mentions the Global Admin as a requirement: https://learn.microsoft.com/en-us/partner-center/customers/gdap-customer-approval
Roles Requested by LS Retail
LS Retail now primarily requests only the Service Support Administrator role.
The Dynamics 365 Business Central Administrator role is requested only in specific cases, when a partner asks LS Retail to provide support on behalf of their customer.
Roles Requested:
- Service Support Administrator
- Used to submit Microsoft support cases on behalf of the customer.
- This role is the standard requirement and is requested in all customer support scenarios.
- The approval link for this role is typically configured with a longer validity period.
- Dynamics 365 Business Central Administrator (requested only when applicable)
- Used to support Business Central environments, including cases where access to Sandbox environments is required.
- This role is requested only if a partner explicitly requests LS Retail to support their customer.
Note: Depending on the scenario, customers may receive either one or two separate approval links, as each role assignment may have a different expiration date.
An example of this communication is shown below.
Below is the GDAP Link, please forward it to your customer. The roles requested are D365 Business Central Administrator and Service
Support Administrator. Note: There are two different links, hence the customer Global Admin must approve each link separately.
Note: An admin needs to be the one accepting the link, and already logged into the environment, otherwise they receive an error.
By clicking the included link, you are able to accept the request for us to administer your products using the roles listed below for the specified date range.
Click to review and accept the link.
Duration in days: 180
Requested Microsoft Entra roles:
- Dynamics 365 Business Central Administrator
Can access Dynamics 365 Business Central environments and perform all administrative tasks on the environments.
By clicking the included link, you are able to accept the request for us to administer your products using the roles listed below for the specified date range. This admin relationship would be auto extended by 6 months. You could modify in Microsoft admin center.
Click to review and accept the link.
Duration in days: 730
Requested Microsoft Entra roles:
- Service support administrator
Can read service health information and manage support tickets.
Step 5