Overview
This article describes the process of performing a fresh install of Work 365 v2.5 and subsequent releases.
- If you are upgrading from Work 365 version 2.5 or later, please refer https://help.work365apps.com/documentation/billing/upgrade-work-365/
Version 2.5 of Work 365 is addresses Microsoft’s security policy mandates and MFA requirements that came into effect 1st August 2019. This is currently the minimum supported version of Work 365.
While Work 365 has been compliant to the Secure App Model for PartnerCenter integration since version 2.1, released February 2019, this v2.5 extends this model to the Dynamics 365 connection; which will be affected by the security policy updates.
Prepare for MFA enablement of the tenant
If your tenant has Azure AD Premium Plan 1 (or higher) or Enterprise Security + Mobility (EMS) plans, it is highly recommended to assign these licenses to your users before proceeding with MFA enablement. The planning and rollout of MFA across your tenant are not in the scope of this article. Work with your IT team to plan and deploy MFA across the organization.
Pre-requisites
The following must be available and configured before the installation process begins.
| # | Requirement | Comments |
| 1 | Availability of tenant ‘Global Administrator’ credentials with ‘System Administrator’ role in Dynamics 365. | The global administrative privileges are required to enable the MFA policies and to give organization wide consent for the Work 365 app. Users can either log into CRM directly as the Global Administrator to complete the consent, or their user account can be temporarily assigned Global Admin permissions until the consent is completed. |
| 2 | User in step 1, should have a Dynamics 365 license assigned. | To log into CRM as the Global Administrator, the Global Administrator account must have a license assigned. This license is only required for the upgrade and can be unassigned after the installation has completed. |
| 3 | Work 365 Service account should have the ‘Work 365 Service’ role assigned. | If you are upgrading from a solution that does not have the ‘Work 365 Service’ role in Dynamics CRM, you can do this after the “Install Work 365 v2.5” step in the upgrade process. |
| 4 | Work 365 Service account should have the ‘Work 365 Admin’ Field Security Profile assigned. | Certain privileged fields are secured in Work 365 using a Dynamics 365 Field Security Profile called ‘Work 365 Admin’. Steps detailed here. |
| 5 | The Dynamics 365 tenant must have the Sales app installed. | Work 365 leverages the Dynamics 365 Sales App’s underlying platform and hence this app is a pre-requisite for Work 365. |
| 6 | For 1-Tier (Direct Bill) partners only:
· A separate account in Partner Center (aka Integration Account) should be created. · A ‘Native App’ in Partner Center should be available. |
The integration account with Partner Center should be assigned an ‘Admin Agent’ role in Partner Center. MFA for this account must be enabled. A Dynamics 365 license for this account is not required.
More information available at: |
Enable MFA Policies
Work with your IT team to ensure that you are compliant with the Microsoft security requirements coming into effect August 1, 2019. More information on this can be obtained from https://docs.microsoft.com/en-us/partner-center/partner-security-requirements and https://docs.microsoft.com/en-us/partner-center/partner-security-requirements-faq
The policies may take a few minutes to kick in and hence it is advised to wait for about 5-10 minutes after enabling any policies on the Azure AD tenant and before proceeding with the next steps on the Work 365 install.
- Register MFA for the Work 365 service account by navigating to https://aka.ms/mfasetup and following the instructions therein.
- Register MFA for the account with which the next steps will be carried out (Global Administrator account)
Install Work 365 v2.5
Please note that these steps MUST be executed as a user with tenant Global Administrator AND Dynamics 365 System Administrator roles. This user MUST also have a Dynamics 365 Customer Engagement license assigned.
- Install the solution from App Source using this link – https://bit.ly/GetWork365
- Follow the prompts to complete the installation. You will need to have System Administration privileges to complete the installation process.
- The installation from AppSource is a silent process. You will not see an upgrade bar or process but the installation is happening in the background.
- It can take up to 15 minutes to complete this process.
- Once the Import process is completed, you will see the Work 365 solution under Settings > Solutions.
- Click on the Work 365 solution that was just installed, to open the Solution Window.
Complete Registration Process
Please note that these steps MUST be executed as a user with tenant Global Administrator AND Dynamics 365 System Administrator roles. This user MUST also have a Dynamics 365 Customer Engagement license assigned.
1) If installing Work 365 for the first time, a screen as below will be presented. Fill in the details and click the Submit button to have the Work 365 license generated. Connect with your account manager to obtain the correct license key.
2) Click the Get Consent button.
3) A sign-in prompt is presented. Login with Global Administrator credentials. MFA registration options may be presented, which should be completed.
4) Review and accept the permissions requested by Work 365 – this is the same permission set as before.
5) Complete the registration form. The Organization Name is available on the screen in the background (see step 2). Select the right Time-Zone for the organization. Click Submit.
6) Copy the link presented. The link icon provides a short-cut to copy this link to the clipboard. Please note that this link is valid for only for 15 minutes. If the link expires, the process may be restarted from step 1 under the Complete Registration Process section.
Complete Consent & Initialization Process
Please note that these steps MUST be executed as the Work 365 service account. This account MUST have the Work 365 Service role assigned in Dynamics 365. This account MUST have a Dynamics 365 Customer Engagement license assigned. This license assignment cannot be revoked.
1) Open a new browser window, preferably in Incognito / InPrivate mode. Navigate to the link copied over from the previous step. A login prompt will be presented. Enter the credentials of the Work 365 service account.
2) MFA authorization may be prompted. If so, enter the MFA challenge requested.
3) Upon successful verification of credentials, the following page will be presented. Click the Begin Upgrade button to commence the upgrade process.
4) Wait for the upgrade process to be completed. Do not close the browser window or navigate to another page.
5) The upgrade process is completed when a screen like below is shown.
Congratulations! The Work 365 upgrade process was completed successfully!
Next Steps
- Review the configuration settings.
https://help.work365apps.com/documentation/billing/work-365-configuration-settings/ - Assign security roles to users.
https://help.work365apps.com/documentation/billing/work-365-security-roles/ - Configure Manufacturers.
https://help.work365apps.com/documentation/billing/configuring-your-manufacturers/ - Configure Providers.
https://help.work365apps.com/documentation/billing/work-365-providers/configuring-providers/ - Configure your connection with Partner Center (Direct Bill Partners only).
https://help.work365apps.com/documentation/billing/work-365-providers/configuring-microsoft-partnercenter-provider/ - Review the QuickStart guide.
https://help.work365apps.com/documentation/billing/quickstart/