Skip to main content
Review the minimum standard delegated scope mapping for every Microsoft Dynamics 365 action.
Dataverse uses user_impersonation on the organization URL, not Microsoft Graph permissions. Table-level access is governed by the user’s Dataverse security role, not by OAuth scopes. Sites.Selected does not apply.

Minimum scopes per action

Each Dynamics 365 connection also requests openid and offline_access. These connection scopes apply in addition to the action scopes in the table.The integration allows you to define an organization URL when configuring the connection. In the table below, {organization-url} represents your Dataverse environment URL, for example https://org12345.crm.dynamics.com/user_impersonation.
ActionDescriptionMinimum scopes
Close opportunity as lostCloses a Sales opportunity as lost./user_impersonation
Close opportunity as wonCloses a Sales opportunity as won./user_impersonation
Create recordCreates a Dataverse record./user_impersonation
Delete recordDeletes a Dataverse record./user_impersonation
Describe tableDescribes a Dataverse table and its columns./user_impersonation
Disqualify leadDisqualifies a Sales lead./user_impersonation
Get recordGets a Dataverse record by ID./user_impersonation
List recordsLists records from a Dataverse table./user_impersonation
List tablesLists Dataverse tables in the environment./user_impersonation
Qualify leadQualifies a Sales lead./user_impersonation
Recalculate opportunityRecalculates a Sales opportunity./user_impersonation
Update recordUpdates a Dataverse record./user_impersonation