Databook

This document contains instructions for granting Databook C4S permissions to read data from Dynamics 365. The document is an adaptation of the <a href="https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/grant-admin-consent" target="_blank" rel="nofollow noopener noreferrer">official documentation on Microsoft Entra</a>.

A Microsoft Entra user account with one of the following roles:

- Privileged Role Administrator, for granting consent for apps requesting any permission, for any API.
- Cloud Application Administrator or Application Administrator, for granting consent for apps requesting any permission for any API, <i>except</i> Microsoft Graph app roles (application permissions).
- A custom directory role that includes the <a href="https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/custom-consent-permissions" target="_blank" rel="nofollow noopener noreferrer">permission to grant permissions to applications</a>, for the permissions required by the application.

- A Microsoft Entra user account with one of the following roles:
  - Privileged Role Administrator, for granting consent for apps requesting any permission, for any API.
  - Cloud Application Administrator or Application Administrator, for granting consent for apps requesting any permission for any API, <i>except</i> Microsoft Graph app roles (application permissions).
  - A custom directory role that includes the <a href="https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/custom-consent-permissions" target="_blank" rel="nofollow noopener noreferrer">permission to grant permissions to applications</a>, for the permissions required by the application.

Go to <a href="https://entra.microsoft.com/#home" target="_blank" rel="nofollow noopener noreferrer">https://entra.microsoft.com/#home</a> and sign in using your account.

1. Go to <a href="https://entra.microsoft.com/#home" target="_blank" rel="nofollow noopener noreferrer">https://entra.microsoft.com/#home</a> and sign in using your account.

Click on Applications → Enterprise Application in the sidepanel.

1. Click on Applications → Enterprise Application in the sidepanel.

You should now see all Enterprise Applications in your organization.

1. You should now see all Enterprise Applications in your organization.

Find <code>Databook Copilot Integration API</code> with search, and click Databook Copilot Integration API.

1. Find <code>Databook Copilot Integration API</code> with search, and click Databook Copilot Integration API.

You should now see the Databook Copilot Integration API overview page.

1. You should now see the Databook Copilot Integration API overview page.

Click on Security → Permissions in the nested sidepanel.

1. Click on Security → Permissions in the nested sidepanel.

You should now see all permissions that are granted for Databook Copilot Integration API.

1. You should now see all permissions that are granted for Databook Copilot Integration API.

Click on the Grant Admin Consent button to start the authorization flow.

1. Click on the Grant Admin Consent button to start the authorization flow.

In the authorization flow, select an account that meets the Prerequisites (refer to start document).

1. In the authorization flow, select an account that meets the Prerequisites (refer to start document).

In the authorization flow, approve the requested permissions by clicking on the Accept button.

1. In the authorization flow, approve the requested permissions by clicking on the Accept button.

Wait a minute, then click on the Refresh button in the Databook Copilot Integration API permissions.

1. Wait a minute, then click on the Refresh button in the Databook Copilot Integration API permissions.

Verify that permissions are granted - pay attention to <code>dataverse:user_impersonation</code> permission.

1. Verify that permissions are granted - pay attention to <code>dataverse:user_impersonation</code> permission.

We are seeing a <code>Failure exchanging connector token to Dynamics365 token.</code> error message.

- Verify that permissions are granted - pay attention to <code>dataverse:user_impersonation</code> permission.
  - This permission is critical and enables Databook C4S to retrieve CRM data.
- If the permission is there, and you still see the error message. Try removing any and all existing connections associated with the application. Then re-add the connections after permission update.
  - This should be possible through, e.g., <a href="https://make.powerautomate.com/" target="_blank" rel="nofollow noopener noreferrer">https://make.powerautomate.com/</a> → Connections.

- We are seeing a <code>Failure exchanging connector token to Dynamics365 token.</code> error message.
  - Verify that permissions are granted - pay attention to <code>dataverse:user_impersonation</code> permission.
    - This permission is critical and enables Databook C4S to retrieve CRM data.
  - If the permission is there, and you still see the error message. Try removing any and all existing connections associated with the application. Then re-add the connections after permission update.
    - This should be possible through, e.g., <a href="https://make.powerautomate.com/" target="_blank" rel="nofollow noopener noreferrer">https://make.powerautomate.com/</a> → Connections.

This document contains instructions for granting Databook C4S permissions to read data from Dynamics 365. The document is an adaptation of the official documentation on Microsoft Entra.

Prerequisites

Permission Setup

Troubleshooting