--- id: video/kAwI0EGSyls type: video title: "What's new: Governance & Administration (2024 release wave 1)" summary: "Business Central 2024 release wave 1 governance and administration session. Already shipped: self-service environment transfer between Entra tenants (February), a 14-day recovery period for deleted environments, and the Dynamics 365 Business Central administrator role. Upcoming: environment-level partner access controls, customer managed encryption keys and Purview auditing. Also covers AppSource preview apps for sandboxes, linking to Power Platform environments, and customer lockbox." tier: official language: en tags: - environment transfer - tenant consolidation - deleted environment recovery - administrator role - partner access controls - preview apps - power platform integration - data governance - customer lockbox - encryption keys - auditing - purview system: administration review: state: reviewed by: opus at: "2026-10-07T23:10:03.179Z" flags: [] generated: at: "2026-10-07T23:10:03.224Z" pipeline: 0.2.0 prompts: extract-video: 1 summarize-video: 2 input_hash: 50a3a771ea75af27aee675dc5ad9555dd4f118e6355b1aeee18c7af5c8e37d40 evidence: - kind: video url: https://www.youtube.com/watch?v=kAwI0EGSyls&t=930s title: "Customer managed encryption keys: announced" date: "2024-04-04T13:30:21.000Z" commit: null t: 930 quote: this is a heads up that this will be coming later in this wave - kind: video url: https://www.youtube.com/watch?v=kAwI0EGSyls&t=129s title: "What's new: Governance & Administration (2024 release wave 1)" date: "2024-04-04T13:30:21.000Z" commit: null t: 129 quote: since we made this capability available as a a self-service functionality in the admin Center at the beginning of February we have already seen - kind: video url: https://www.youtube.com/watch?v=kAwI0EGSyls&t=217s title: "What's new: Governance & Administration (2024 release wave 1)" date: "2024-04-04T13:30:21.000Z" commit: null t: 217 quote: very important transfers can only be executed by internal administrators this is for security reasons - kind: video url: https://www.youtube.com/watch?v=kAwI0EGSyls&t=257s title: "What's new: Governance & Administration (2024 release wave 1)" date: "2024-04-04T13:30:21.000Z" commit: null t: 257 quote: we allow you to schedule these transfers up to 14 days in the future - kind: video url: https://www.youtube.com/watch?v=kAwI0EGSyls&t=331s title: "What's new: Governance & Administration (2024 release wave 1)" date: "2024-04-04T13:30:21.000Z" commit: null t: 331 quote: recently we have improved it and doubled the recovery period from 7 to 14 days - kind: video url: https://www.youtube.com/watch?v=kAwI0EGSyls&t=677s title: "What's new: Governance & Administration (2024 release wave 1)" date: "2024-04-04T13:30:21.000Z" commit: null t: 677 quote: the linking of environments is one to one one business Central environment to one Power Platform environment and it can also be reverted - kind: video url: https://www.youtube.com/watch?v=kAwI0EGSyls&t=849s title: "What's new: Governance & Administration (2024 release wave 1)" date: "2024-04-04T13:30:21.000Z" commit: null t: 849 quote: the lockbox policy is only enforced for environments that are activated for managed environments - kind: video url: https://www.youtube.com/watch?v=kAwI0EGSyls&t=930s title: "What's new: Governance & Administration (2024 release wave 1)" date: "2024-04-04T13:30:21.000Z" commit: null t: 930 quote: this is a heads up that this will be coming later in this wave - kind: video url: https://www.youtube.com/watch?v=kAwI0EGSyls&t=1055s title: "What's new: Governance & Administration (2024 release wave 1)" date: "2024-04-04T13:30:21.000Z" commit: null t: 1055 quote: by default uh there's an 180 days log retention in perview and it can be extended up to 10 years with additional add-on licenses links: learn: [] objects: [] features: [] topics: [] localizations: [] videos: [] posts: [] guidelines: [] video_id: kAwI0EGSyls channel: yt-microsoft source_name: Microsoft Dynamics 365 Business Central (YouTube) url: https://www.youtube.com/watch?v=kAwI0EGSyls published_at: "2024-04-04T13:30:21.000Z" duration_s: 1113 captions: full audience: - administrator - partner - decision maker - functional consultant chapters: - t: 0 title: Introduction and agenda overview - t: 108 title: Environment transfer between tenants - t: 311 title: Deleted environment recovery period expansion - t: 362 title: Dynamics 365 Business Central administrator role - t: 435 title: Environment-level partner access controls - t: 517 title: AppSource preview apps functionality - t: 642 title: Linking Business Central to Power Platform environments - t: 773 title: Customer lockbox and governance policies - t: 930 title: Customer managed encryption keys - t: 992 title: Auditing and Microsoft Purview integration features: - name: Environment transfer between tenants status: unclear t: 108 verified: false status_source: video - name: Deleted environment recovery period extension status: unclear t: 311 verified: false status_source: video - name: Dynamics 365 Business Central administrator role status: unclear t: 362 verified: false status_source: video - name: Environment-level partner access controls status: unclear t: 435 verified: false status_source: video - name: AppSource preview app installations status: unclear t: 517 verified: false status_source: video - name: Business Central and Power Platform environment linking status: unclear t: 642 verified: false status_source: video - name: Customer lockbox for Business Central status: unclear t: 773 verified: false status_source: video - name: Customer managed encryption keys status: announced t: 930 verified: true status_source: video - name: Auditing in Microsoft Purview status: unclear t: 992 verified: false status_source: video objects_mentioned: - other environment Telemetry - other operations log quotes: - t: 129 text: since we made this capability available as a a self-service functionality in the admin Center at the beginning of February we have already seen check: exact - t: 217 text: very important transfers can only be executed by internal administrators this is for security reasons check: snapped - t: 257 text: we allow you to schedule these transfers up to 14 days in the future check: exact - t: 331 text: recently we have improved it and doubled the recovery period from 7 to 14 days check: exact - t: 677 text: the linking of environments is one to one one business Central environment to one Power Platform environment and it can also be reverted check: exact - t: 849 text: the lockbox policy is only enforced for environments that are activated for managed environments check: exact - t: 930 text: this is a heads up that this will be coming later in this wave check: exact - t: 1055 text: by default uh there's an 180 days log retention in perview and it can be extended up to 10 years with additional add-on licenses check: exact --- # What's new: Governance & Administration (2024 release wave 1) > Business Central 2024 release wave 1 governance and administration session. Already shipped: self-service environment transfer between Entra tenants (February), a 14-day recovery period for deleted environments, and the Dynamics 365 Business Central administrator role. Upcoming: environment-level partner access controls, customer managed encryption keys and Purview auditing. Also covers AppSource preview apps for sandboxes, linking to Power Platform environments, and customer lockbox. [Watch on YouTube](https://www.youtube.com/watch?v=kAwI0EGSyls) · Microsoft Dynamics 365 Business Central (YouTube) · 2024-04-04 · 18:33 · tier official · reviewed (checked by Opus) ## Overview The video, published 2024-04-04, covers the governance and administration updates in 2024 release wave 1. It starts with tenant-level topics: transferring environments between Microsoft Entra tenants, a longer recovery period for deleted environments, a dedicated administrator role, and partner access limited to specific environments. It then covers AppSource preview apps in sandboxes, linking Business Central environments to Power Platform managed environments, and the data governance features that build on that link: customer lockbox, customer managed encryption keys, and auditing in Microsoft Purview. Environment transfer and preview app installation are demoed. ## Key points - Environment transfer between Entra tenants is self-service in the admin center. Only internal administrators can run it, the destination tenant ID is specified, and transfers can be scheduled up to 14 days ahead. Requests must be accepted within 8 hours. - After a transfer, users must be recreated and permissions reassigned in the destination tenant. That tenant needs a paid license and available quota. - The recovery period for deleted environments doubled from 7 to 14 days. Total backup retention stays at 28 days. - The new Dynamics 365 Business Central administrator role covers environment lifecycle, extension management and admin center access, but not other Dynamics 365 products. Help desk admin access will be removed. - Partner access can be restricted to specific environments. It applies to delegated users and service authentication apps. - Power Platform linking is one-to-one and can be reverted. Environment type and Azure geo must match, linking restarts the environment, and a linked environment cannot be deleted. Copied or restored environments do not inherit the link. - Customer lockbox is enforced only for managed environments. Approved Microsoft access expires after 8 hours. Customer managed encryption keys were announced for later in the wave and need a linked managed environment. ## Chapters - [0:00](https://www.youtube.com/watch?v=kAwI0EGSyls&t=0s) Introduction and agenda overview - [1:48](https://www.youtube.com/watch?v=kAwI0EGSyls&t=108s) Environment transfer between tenants - [5:11](https://www.youtube.com/watch?v=kAwI0EGSyls&t=311s) Deleted environment recovery period expansion - [6:02](https://www.youtube.com/watch?v=kAwI0EGSyls&t=362s) Dynamics 365 Business Central administrator role - [7:15](https://www.youtube.com/watch?v=kAwI0EGSyls&t=435s) Environment-level partner access controls - [8:37](https://www.youtube.com/watch?v=kAwI0EGSyls&t=517s) AppSource preview apps functionality - [10:42](https://www.youtube.com/watch?v=kAwI0EGSyls&t=642s) Linking Business Central to Power Platform environments - [12:53](https://www.youtube.com/watch?v=kAwI0EGSyls&t=773s) Customer lockbox and governance policies - [15:30](https://www.youtube.com/watch?v=kAwI0EGSyls&t=930s) Customer managed encryption keys - [16:32](https://www.youtube.com/watch?v=kAwI0EGSyls&t=992s) Auditing and Microsoft Purview integration ## Features | Feature | Status | At | Evidence | |---|---|---|---| | Environment transfer between tenants | status not stated, demoed | [1:48](https://www.youtube.com/watch?v=kAwI0EGSyls&t=108s) | | | Deleted environment recovery period extension | status not stated | [5:11](https://www.youtube.com/watch?v=kAwI0EGSyls&t=311s) | | | Dynamics 365 Business Central administrator role | status not stated | [6:02](https://www.youtube.com/watch?v=kAwI0EGSyls&t=362s) | | | Environment-level partner access controls | status not stated | [7:15](https://www.youtube.com/watch?v=kAwI0EGSyls&t=435s) | | | AppSource preview app installations | status not stated, demoed | [8:37](https://www.youtube.com/watch?v=kAwI0EGSyls&t=517s) | | | Business Central and Power Platform environment linking | status not stated | [10:42](https://www.youtube.com/watch?v=kAwI0EGSyls&t=642s) | | | Customer lockbox for Business Central | status not stated | [12:53](https://www.youtube.com/watch?v=kAwI0EGSyls&t=773s) | | | Customer managed encryption keys | announced | [15:30](https://www.youtube.com/watch?v=kAwI0EGSyls&t=930s) | "this is a heads up that this will be coming later in this wave" ([15:30](https://www.youtube.com/watch?v=kAwI0EGSyls&t=930s)) | | Auditing in Microsoft Purview | status not stated | [16:32](https://www.youtube.com/watch?v=kAwI0EGSyls&t=992s) | | ## AL objects mentioned As heard in the captions. A name that matches one object page by exact type and name links to it; the others stay as named. - other "environment Telemetry" at [5:11](https://www.youtube.com/watch?v=kAwI0EGSyls&t=311s) - other "operations log" at [5:11](https://www.youtube.com/watch?v=kAwI0EGSyls&t=311s) ## Quotes - [2:09](https://www.youtube.com/watch?v=kAwI0EGSyls&t=129s) "since we made this capability available as a a self-service functionality in the admin Center at the beginning of February we have already seen" - [3:37](https://www.youtube.com/watch?v=kAwI0EGSyls&t=217s) "very important transfers can only be executed by internal administrators this is for security reasons" - [4:17](https://www.youtube.com/watch?v=kAwI0EGSyls&t=257s) "we allow you to schedule these transfers up to 14 days in the future" - [5:31](https://www.youtube.com/watch?v=kAwI0EGSyls&t=331s) "recently we have improved it and doubled the recovery period from 7 to 14 days" - [11:17](https://www.youtube.com/watch?v=kAwI0EGSyls&t=677s) "the linking of environments is one to one one business Central environment to one Power Platform environment and it can also be reverted" - [14:09](https://www.youtube.com/watch?v=kAwI0EGSyls&t=849s) "the lockbox policy is only enforced for environments that are activated for managed environments" - [15:30](https://www.youtube.com/watch?v=kAwI0EGSyls&t=930s) "this is a heads up that this will be coming later in this wave" - [17:35](https://www.youtube.com/watch?v=kAwI0EGSyls&t=1055s) "by default uh there's an 180 days log retention in perview and it can be extended up to 10 years with additional add-on licenses" ## Disclaimers in the video - [1:27](https://www.youtube.com/watch?v=kAwI0EGSyls&t=87s) preview: new auditing capabilities that we are going to ship soon in perview - [15:30](https://www.youtube.com/watch?v=kAwI0EGSyls&t=930s) coming-later: customer managed encryption Keys all customer data that is stored in business Central is encrypted addressed with a strong Microsoft managed encryption key by default so Microsoft stores and manages the database encryption key for all your data so that you don't have to however we will provide the ability to use a customer managed encryption key also referred to as cmk for your added data protection control where you can then self-manage the encryption key that is associated with your business Central environment so this is a heads up that this will be coming later in this wave - [17:03](https://www.youtube.com/watch?v=kAwI0EGSyls&t=1023s) preview: in this initial release we will deliver the capability to audit create update and delete events in business Central that require administrator privileges Presenters (as heard): Roman.