Skip to main content

Roles and permissions

Set up the Payhawk extension for Microsoft Dynamics 365 Finance, configure the shared data, or deploy it in a test environment.

Payhawk avatar
Written by Payhawk
Updated this week

In order to connect Payhawk, there are two steps that need to be taken in terms of providing access rights to Payhawk.

You need to grant Payhawk the following permissions:

  • To allow the connection in Azure Active Directory (Entra), an Azure Active Directory Administrator has to approve the connection between Payhawk and Azure after receiving an application request in their inbox. This is a one-time setup that allows the systems to communicate.

  • To establish the connection between Payhawk and Microsoft Dynamics 365 Finance, you need an Integration user in Dynamics. This user does not need to be an administrator, but they must have the necessary permissions to:

    • Access financial dimensions

    • Access tax rates

    • Access vendors

    • Access GL codes/projects

    • Create journal headers

    • Create journal entries

    • Add attachments

Before connecting Payhawk with Microsoft Dynamics 365 Finance, ensure that the necessary actions are completed in advance and that the appropriate roles and permissions are assigned.

To be able to connect the systems, you need to have:

  • Microsoft Dynamics 365 Finance Administrator or Integration users.

  • Administrator rights for Azure.

For Payhawk to connect to Microsoft Dynamics 365 Finance:

  • You need to provide an approved Azure Application allowing Payhawk to communicate to the ERP through Azure Active Directory (AAD). The application utilizes Microsoft Entra's user access to authenticate Payhawk to the ERP.

  • The deployable extension package has to be installed and deployed on the ERP test environment by their team and configured.

For the initial setup, you need to provide Payhawk with the following:

  • Invoice journal

  • Vendor payment journal

  • FX Fees Journal

  • Dimension structure

For the setup during the connection, you will have to:

  1. Authenticate

  2. Map accounts

  3. Do the initial data sync

Next steps

Did this answer your question?