--- id: video/TBBlYpwbAFk type: video title: "What's New: Environment-Level Access Controls for Delegated Administrators (2024 release wave 2)" summary: Business Central 2024 release wave 2 adds a per-environment partner access setting in the tenant admin center. Internal administrators can allow all partners, selected partners (up to 10 Entra tenants), or no partners. The video demos the setting and its limits. tier: official language: en tags: - delegated administrator access - partner access control - environment-level security - gdap - tenant isolation - multi-tenant application access - admin center - authentication restrictions system: administration review: state: reviewed by: opus at: "2026-10-07T23:04:51.237Z" flags: [] generated: at: "2026-10-13T00:32:41.360Z" pipeline: 0.2.0 prompts: extract-video: 1 summarize-video: 2 input_hash: dff4cd58edf4661f228ceeca75b677c941e1c6aa711a26d818e8aa5956a635ae evidence: - kind: video url: https://www.youtube.com/watch?v=TBBlYpwbAFk&t=6s title: "What's New: Environment-Level Access Controls for Delegated Administrators (2024 release wave 2)" date: "2024-10-08T15:00:34.000Z" commit: null t: 6 quote: a new feature that is going to be introduced with the business Central 2024 Wave 2 and that is the ability to control the - kind: video url: https://www.youtube.com/watch?v=TBBlYpwbAFk&t=67s title: "What's New: Environment-Level Access Controls for Delegated Administrators (2024 release wave 2)" date: "2024-10-08T15:00:34.000Z" commit: null t: 67 quote: partner access and right now the value is set to all Partners this is exactly the default value that applies and has always applied - kind: video url: https://www.youtube.com/watch?v=TBBlYpwbAFk&t=127s title: "What's New: Environment-Level Access Controls for Delegated Administrators (2024 release wave 2)" date: "2024-10-08T15:00:34.000Z" commit: null t: 127 quote: if a tenant has a gdap relationship with my customer tenant then it will show as access type gup or if a tenant has - kind: video url: https://www.youtube.com/watch?v=TBBlYpwbAFk&t=188s title: "What's New: Environment-Level Access Controls for Delegated Administrators (2024 release wave 2)" date: "2024-10-08T15:00:34.000Z" commit: null t: 188 quote: selected Partners so only the external tenants that I have explicitly opted in for this feature will have access to view and administer this - kind: video url: https://www.youtube.com/watch?v=TBBlYpwbAFk&t=248s title: "What's New: Environment-Level Access Controls for Delegated Administrators (2024 release wave 2)" date: "2024-10-08T15:00:34.000Z" commit: null t: 248 quote: the partner access settings affect the authentication of delegated users and foreign multi-tenant applications so both of these set of um users or applications - kind: video url: https://www.youtube.com/watch?v=TBBlYpwbAFk&t=303s title: "What's New: Environment-Level Access Controls for Delegated Administrators (2024 release wave 2)" date: "2024-10-08T15:00:34.000Z" commit: null t: 303 quote: this is a feature that acts on top of the requirement of having the tenant level access consents set up properly so it does - kind: video url: https://www.youtube.com/watch?v=TBBlYpwbAFk&t=343s title: "What's New: Environment-Level Access Controls for Delegated Administrators (2024 release wave 2)" date: "2024-10-08T15:00:34.000Z" commit: null t: 343 quote: we have a limitation for being able to restrict the environment access on a given environment for up to 10 entra tenants - kind: video url: https://www.youtube.com/watch?v=TBBlYpwbAFk&t=343s title: "What's New: Environment-Level Access Controls for Delegated Administrators (2024 release wave 2)" date: "2024-10-08T15:00:34.000Z" commit: null t: 343 quote: the ability to control the um environment level access is only available to internal administrators links: learn: [] objects: [] features: [] topics: [] localizations: [] videos: [] posts: [] guidelines: [] video_id: TBBlYpwbAFk channel: yt-microsoft source_name: Microsoft Dynamics 365 Business Central (YouTube) url: https://www.youtube.com/watch?v=TBBlYpwbAFk published_at: "2024-10-08T15:00:34.000Z" duration_s: 384 captions: full audience: - administrator - partner - functional consultant chapters: - t: 0 title: Introduction to environment access control feature - t: 26 title: "Demo setup: tenant admin center and production environments" - t: 67 title: Partner access setting and modification interface - t: 107 title: "Understanding access types: GDAP and application-level access" - t: 147 title: Configuring selected partners for environment access - t: 188 title: Reverting settings and disabling partner access entirely - t: 228 title: Impact on authentication and relationship with tenant-level access - t: 303 title: Limitations and administrative access control restrictions features: - name: Partner access control by environment status: unclear t: 6 verified: false status_source: video - name: All partners access mode status: unclear t: 67 verified: false status_source: video - name: Selected partners access mode status: unclear t: 107 verified: false status_source: video - name: Partner access disabled mode status: unclear t: 208 verified: false status_source: video - name: Environment details page partner access setting status: unclear t: 67 verified: false status_source: video objects_mentioned: - page environments list page - page environment Details page - page tenant admin Center quotes: - t: 6 text: a new feature that is going to be introduced with the business Central 2024 Wave 2 and that is the ability to control the check: exact - t: 67 text: partner access and right now the value is set to all Partners this is exactly the default value that applies and has always applied check: exact - t: 127 text: if a tenant has a gdap relationship with my customer tenant then it will show as access type gup or if a tenant has check: snapped - t: 188 text: selected Partners so only the external tenants that I have explicitly opted in for this feature will have access to view and administer this check: exact - t: 248 text: the partner access settings affect the authentication of delegated users and foreign multi-tenant applications so both of these set of um users or applications check: exact - t: 303 text: this is a feature that acts on top of the requirement of having the tenant level access consents set up properly so it does check: exact - t: 343 text: we have a limitation for being able to restrict the environment access on a given environment for up to 10 entra tenants check: exact - t: 343 text: the ability to control the um environment level access is only available to internal administrators check: exact --- # What's New: Environment-Level Access Controls for Delegated Administrators (2024 release wave 2) > Business Central 2024 release wave 2 adds a per-environment partner access setting in the tenant admin center. Internal administrators can allow all partners, selected partners (up to 10 Entra tenants), or no partners. The video demos the setting and its limits. [Watch on YouTube](https://www.youtube.com/watch?v=TBBlYpwbAFk) · Microsoft Dynamics 365 Business Central (YouTube) · 2024-10-08 · 6:24 · tier official · reviewed (checked by Opus) ## Overview The video covers a new environment-level control for partner access, introduced with Business Central 2024 release wave 2. On the environment details page in the tenant admin center, internal administrators can modify the partner access setting. The default is all partners, which has always applied. The demo shows switching to selected partners by picking from a list of foreign tenants, then reverting and disabling partner access entirely. It explains that the setting affects authentication of delegated users and foreign multi-tenant applications. It sits on top of the tenant-level access that must already be configured. ## Key points - The partner access setting is on the environment details page in the tenant admin center and has three values: all partners (default), selected partners, and off. - All partners mode grants access to external tenants with GDAP relationships or application-level access. - Selected partners mode lets an internal administrator choose which foreign tenants can view and administer the environment. - Current limit: access can be restricted to a maximum of 10 Entra tenants per environment. - Turning partner access off limits environment access and administration to internal administrators. - The setting affects authentication of delegated users and foreign multi-tenant applications, including login and admin center visibility. - It does not replace tenant-level setup: GDAP relationships, app registrations and admin consent for external applications are still required. ## Chapters - [0:00](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=0s) Introduction to environment access control feature - [0:26](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=26s) Demo setup: tenant admin center and production environments - [1:07](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=67s) Partner access setting and modification interface - [1:47](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=107s) Understanding access types: GDAP and application-level access - [2:27](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=147s) Configuring selected partners for environment access - [3:08](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=188s) Reverting settings and disabling partner access entirely - [3:48](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=228s) Impact on authentication and relationship with tenant-level access - [5:03](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=303s) Limitations and administrative access control restrictions ## Features Every feature below: status not stated, demoed. | Feature | At | |---|---| | Partner access control by environment | [0:06](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=6s) | | All partners access mode | [1:07](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=67s) | | Selected partners access mode | [1:47](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=107s) | | Partner access disabled mode | [3:28](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=208s) | | Environment details page partner access setting | [1:07](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=67s) | ## AL objects mentioned As heard in the captions. A name that matches one object page by exact type and name links to it; the others stay as named. - page "environments list page" at [0:46](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=46s) - page "environment Details page" at [1:07](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=67s) - page "tenant admin Center" at [0:26](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=26s) Not found in BC28-30: page "environments list page", page "environment Details page", page "tenant admin Center". ## Quotes - [0:06](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=6s) "a new feature that is going to be introduced with the business Central 2024 Wave 2 and that is the ability to control the" - [1:07](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=67s) "partner access and right now the value is set to all Partners this is exactly the default value that applies and has always applied" - [2:07](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=127s) "if a tenant has a gdap relationship with my customer tenant then it will show as access type gup or if a tenant has" - [3:08](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=188s) "selected Partners so only the external tenants that I have explicitly opted in for this feature will have access to view and administer this" - [4:08](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=248s) "the partner access settings affect the authentication of delegated users and foreign multi-tenant applications so both of these set of um users or applications" - [5:03](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=303s) "this is a feature that acts on top of the requirement of having the tenant level access consents set up properly so it does" - [5:43](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=343s) "we have a limitation for being able to restrict the environment access on a given environment for up to 10 entra tenants" - [5:43](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=343s) "the ability to control the um environment level access is only available to internal administrators" ## Disclaimers in the video - [5:03](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=303s) subject-to-change: this is a feature that acts on top of the requirement of having the tenant level access consents set up properly so it does not replace the need for setting up the gup relationships for external partner tenants or setting up app registrations and admin consent for uh external applications so this is still a requirement - [5:43](https://www.youtube.com/watch?v=TBBlYpwbAFk&t=343s) other: at the moment we have a limitation for being able to restrict the environment access on a given environment for up to 10 entra tenants Presenters (as heard): Ricardo.