D365 F&O security analyzer: find who has access, the narrowest role to grant, and compare environments.
Users
69
store count
Rating
5.0 / 5
unchanged in 30 days
Ratings
1
total ratings
Store rank
#97K
#81K among extensions
Version
7.2.0
updated 20 Sep 2026
Users
monthly, 1 months
Latest, 19 Oct 2026:69 usersMove the mouse over the chart for any month
Ratings count
monthly, 1 months
Latest, 19 Oct 2026:1 ratingsMove the mouse over the chart for any month
The Chrome Web Store rounds user counts down to the leading digit, so the user line moves in steps. The ratings count is exact and is the better signal of real adoption.
About D365 Who Has Access
Stop guessing which security role to give someone in Dynamics 365 finance and operations.
Open any D365 F&O page, click the extension, and the side panel shows every role and every user with access to that form, with the exact access level (Read, Update, Create, Delete, Invoke, Correct) and how Deny overrides Grant.
WHAT IT DOES
- Who has access: every role and user for the current menu item, grouped by role combination, with the license tier each user pulls in.
- Narrowest role: paste menu items and get the role that covers them with the least extra access, plus the duties and privileges behind it.
- What role to assign: enter user IDs and see who already has access and the smallest role that closes the gap for the rest.
- Inspect and compare roles: side by side comparison with Grant/Deny conflicts called out.
- Security and license overview: enabled, disabled and external users, role assignments, and effective license tier per user.
- User x permission inventory and CSV export.
- Cross-environment compare: the same user and menu item in two environments (for example UAT and production).
WORKS WITH
- Microsoft commercial cloud (*.dynamics.com), US Government GCC, GCC High and DoD (*.microsoftdynamics.us) and China (*.dynamics.cn), granted at install.
- On-premises or custom domains: click "Allow access" once for that site.
PRIVACY
- Uses your existing D365 sign-in. You only see what your own account can read (System administrator or Security administrator is needed to read security permissions).
- Nothing leaves your browser. No analytics, no tracking, no remote code, no accounts.
Dynamics 365 is a trademark of Microsoft. This extension is not affiliated with or endorsed by Microsoft.