What does a Dynamics 365 administrator do day to day?
Most days start with access. People join, change jobs and leave, and each change means a security role gets added or removed. On the Sales and Customer Service side, roles are built from access levels and permissions on tables. A trap catches new admins here. If you copy a predefined role such as Sales Manager to make a custom role, your copy does not pick up the permissions Microsoft adds to the original later. You have to add them yourself, so updates can break custom roles.
Finance and Operations uses a different model. Permissions sit inside privileges, privileges sit inside duties, and you assign duties and privileges to roles. You can also set rules that put users into roles automatically, for example based on their HR position. You can apply data security policies that limit a role to one legal entity or to the current period. On either platform, you grant access through roles, not by setting permissions for each user.
Environments, storage and data retention
The Power Platform admin center is where you manage environments, security, monitoring, deployments, licensing and support across Power Platform and several Dynamics 365 apps. An environment belongs to one Microsoft Entra tenant, is tied to one geography, and holds zero or one Dataverse database. Most organizations keep separate development, test and production environments. Inside an environment, the Environment Admin role can provision a database, manage resources and set data loss prevention policies. Once a database exists, System Administrator takes over that job.
Storage is a running cost you have to watch. Dataverse splits it into database, file and log storage, and audit logs and plug-in trace logs both count against log storage. Long-term retention policies move inactive rows into a read-only store, and only Managed Environments can use them. Be careful before you run one. Retained data cannot go back to live, and each policy run uses API requests.
Licenses as a seat-count job
Every user needs a paid seat, and finance will ask why the bill went up. The licensing page in the Power Platform admin center shows license consumption by environment and flags environments that need attention. In practice the administrator reconciles three lists: who has a license, who actually signs in, and who has left. Reclaiming seats from leavers and from people who never use the system is often the quickest saving an admin can show in the first year.
Release management and Lifecycle Services
Microsoft ships updates on its own timetable, so testing them is a core part of the job. Finance and Operations gets four service updates a year, in February, April, July and October. April and October bring the major feature waves, and you can pause one update for up to one cycle. Microsoft runs the infrastructure. The customer owns user and security management, nonproduction environments, and checking that extensions still work after an update. Customer Engagement apps open early access weeks before a wave switches on.
Lifecycle Services (LCS) is the portal for hosting Finance and Operations environments, running support tasks and managing asset libraries. Microsoft has deprecated some LCS features under its One Dynamics One Platform work, so expect more of this admin work to move into the Power Platform admin center. Who hires for this role? Mostly end users that run Dynamics 365 themselves, once the partner hands over after go-live. Partners hire admins too, for managed support desks.
What you need
- Security model knowledgeYou need to know Dataverse security roles and access levels, plus the Finance and Operations hierarchy of roles, duties, privileges and permissions if your company runs both.
- Power Platform admin centerKnow how to create and copy environments, assign environment roles, set data loss prevention policies and read the capacity and licensing pages.
- Microsoft Entra ID basicsEnvironments sit inside an Entra tenant, and roles can be assigned through Entra security groups instead of one user at a time.
- Release testing disciplinePlan regression testing in a sandbox before each Finance and Operations service update or Customer Engagement release wave reaches production.
- PL-900 as a starting examMicrosoft lists Power Platform Fundamentals as a beginner exam. It is not a prerequisite for any role-based certification, but it covers Dataverse, Power Apps and Power Automate, which admins deal with daily.
How to get there
- Before year 1Start in support or Microsoft 365 administrationMost admins move over from IT support, a helpdesk, or work as a power user on the business side. Learn Entra users and groups first.
- Year 1Take PL-900Microsoft's beginner Power Platform exam covers Dataverse, connectors, Power Apps and Power Automate.
- Year 1-2Own user access and security rolesTake over joiners, movers and leavers. Then rebuild the custom roles so they follow the predefined roles they were copied from.
- Year 2-3Run environments and release testingManage sandbox copies, storage capacity, retention policies and the regression test plan for each update.
- Year 3+Move into platform lead or architectureSenior admins often take over governance across Power Platform, or move into solution architecture or technical consulting.
Open now on D365 Market
Questions people ask
Is a Dynamics 365 administrator the same as a consultant?
No. A consultant designs and configures the system during a project. An administrator keeps it running afterward: access, environments, storage, license counts and updates. In smaller companies one person often does both.
How often does Microsoft update Finance and Operations?
Four times a year, in February, April, July and October. April and October carry the major feature releases. You can pause a single service update for up to one update cycle.
What happens to custom security roles when Microsoft adds features?
A custom role copied from a predefined role, such as Sales Manager, does not inherit permissions Microsoft adds to the original later. You have to add them by hand. Permission errors after a release wave often come from this.
Can archived Dataverse data be restored to live use?
No. Data moved into Dataverse long-term retention is read-only and cannot return to the live application. The environment must be a Managed Environment to use retention policies.
Is there a starting certification for admins?
Microsoft's Power Platform Fundamentals (PL-900) is a beginner exam covering Dataverse, Power Apps and Power Automate. It is not required for any other certification, but it is a sensible first exam for someone new to the platform.
Sources
- Microsoft Learn: Power Platform admin center overview
- Microsoft Learn: Power Platform environments overview
- Microsoft Learn: Role-based security in finance and operations
- Microsoft Learn: Predefined security roles for Sales
- Microsoft Learn: Service description for finance and operations apps
- Microsoft Learn: Lifecycle Services resources
- Microsoft Learn: Manage implementations by using Lifecycle Services
- Microsoft Learn: Storage management in Dataverse and finance and operations apps
- Microsoft Learn: Dataverse long term data retention overview
- Microsoft Learn: Microsoft Certified: Power Platform Fundamentals
