Overview
This article describes the process of performing a fresh install of Work 365 v3.1 and subsequent releases.
- If you are upgrading from Work 365 version 3.0 or later, please refer https://help.work365apps.com/documentation/billing/upgrade-work-365/
While Work 365 has been compliant to the Secure App Model for PartnerCenter integration since version 2.1, released February 2019, v2.5 and subsequent releases extend this model to the Dynamics 365 connection; which will be affected by the security policy updates.
Prepare for MFA enablement of the tenant
If your tenant has Azure AD Premium Plan 1 (or higher) or Enterprise Security + Mobility (EMS) plans, it is highly recommended to assign these licenses to your users before proceeding with MFA enablement. The planning and rollout of MFA across your tenant are not in the scope of this article. Work with your IT team to plan and deploy MFA across the organization.
Pre-requisites
The following must be available and configured before the installation process begins.
| # | Requirement | Comments |
| 1 | Availability of tenant ‘Global Administrator’ credentials with ‘System Administrator’ role in Dynamics 365. | The global administrative privileges are required to enable the MFA policies and to give organization-wide consent for the Work 365 app. Users can either log into CRM directly as the Global Administrator to complete the consent, or their user account can be temporarily assigned Global Admin permissions until the consent is completed. |
| 2 | User in step 1, should have a Dynamics 365 license assigned. | To log into CRM as the Global Administrator, the Global Administrator account must have a license assigned. This license is only required for the upgrade and can be unassigned after the installation has completed. |
| 3 | The Dynamics 365 tenant must have the Sales app installed. | Work 365 leverages the Dynamics 365 Sales App’s underlying platform and hence this app is a pre-requisite for Work 365. |
| 4 | Enable the English Language in CRM | Work 365 supports multiple languages; in the backend infrastructure, English is required. Enabling English as a language in CRM ensures all backend processes can run without issues. |
| 5 | Installing Work 365 | Login to CRM as the Work 365 Service Account to install the application. Note the Service Account will need temporary System Administrator permissions to complete this task. |
| 6 | Work 365 Service account should have the ‘Work 365 Service’ role assigned. | If you are upgrading from a solution that does not have the ‘Work 365 Service’ role in Dynamics CRM, you can do this after the “Install Work 365” step in the upgrade process. |
| 7 | Work 365 Service account should have the ‘Work 365 Admin’ Field Security Profile assigned. | Certain privileged fields are secured in Work 365 using a Dynamics 365 Field Security Profile called ‘Work 365 Admin’. Steps detailed here. |
| 8 | For 1-Tier (Direct Bill) partners only:
· A separate account in Partner Center (aka Integration Account) should be created. · A ‘Native App’ in the Partner Center should be available. |
The integration account with Partner Center should be assigned an ‘Admin Agent’ role in the Partner Center. MFA for this account must be enabled. A Dynamics 365 license for this account is not required.
More information available at: |
Enable MFA Policies
Work with your IT team to ensure that you are compliant with the Microsoft security requirements coming into effect on August 1, 2019. More information on this can be obtained from https://docs.microsoft.com/en-us/partner-center/partner-security-requirements and https://docs.microsoft.com/en-us/partner-center/partner-security-requirements-faq
The policies may take a few minutes to kick in and hence it is advised to wait for about 5-10 minutes after enabling any policies on the Azure AD tenant and before proceeding with the next steps on the Work 365 install.
- Register MFA for the Work 365 service account by navigating to https://aka.ms/mfasetup and following the instructions therein.
- Register MFA for the account with which the next steps will be carried out (Global Administrator account)
Install Work 365
Please note that these steps MUST be executed as a user with tenant Global Administrator AND Dynamics 365 System Administrator roles. This user MUST also have a Dynamics 365 Customer Engagement license assigned.
- Install the solution from App Source using this link – https://bit.ly/GetWork365
- Follow the prompts to complete the installation. You will need to have System Administration privileges to complete the installation process.
- The installation from AppSource is a silent process. You will not see an upgrade bar or process but the installation is happening in the background.
- It can take up to 15 minutes to complete this process.
- Once the Import process is completed, you will see the Work 365 solution under Settings ➤ Solutions.
- Click on the Work 365 solution that was just installed, to open the Solution Window.
Complete Registration Process
Please note that these steps MUST be executed as a user with tenant Global Administrator AND Dynamics 365 System Administrator roles. This user MUST also have a Dynamics 365 Customer Engagement license assigned.
1) If installing Work 365 for the first time, a screen as below will be presented. Fill in the details and click the Submit button to have the Work 365 license generated. Connect with your account manager to obtain the correct license key.
2) Click the Get Consent button.
3) A sign-in prompt is presented. Login with Global Administrator credentials. MFA registration options may be presented, which should be completed.
4) Review and accept the permissions requested by Work 365 – this is the same permission set as before.
5) Complete the registration form. The Organization Name is available on the screen in the background (see step 2). Select the right Time-Zone for the organization. Click Submit.
6) Copy the link presented. The link icon provides a short-cut to copy this link to the clipboard. Please note that this link is valid for only 15 minutes. If the link expires, the process may be restarted from step 1 under the Complete Registration Process section.
Complete Consent & Initialization Process
Please note that these steps MUST be executed as the Work 365 service account. This account MUST have the Work 365 Service role assigned in Dynamics 365. This account MUST have a Dynamics 365 Customer Engagement license assigned. This license assignment cannot be revoked.
1) Open a new browser window, preferably in Incognito / InPrivate mode. Navigate to the link copied over from the previous step. A login prompt will be presented. Enter the credentials of the Work 365 service account.
2) MFA authorization may be prompted. If so, enter the MFA challenge requested.
3) Upon successful verification of credentials, the following page will be presented. Click the Begin Upgrade button to commence the upgrade process.
4) Wait for the upgrade process to be completed. Do not close the browser window or navigate to another page.
5) The upgrade process is completed when a screen like below is shown.
Congratulations! The Work 365 upgrade process was completed successfully!
Next Steps
- Review the configuration settings.
https://help.work365apps.com/documentation/billing/work-365-configuration-settings/ - Assign security roles to users.
https://help.work365apps.com/documentation/billing/work-365-security-roles/ - Configure Manufacturers.
https://help.work365apps.com/documentation/billing/configuring-your-manufacturers/ - Configure Providers.
https://help.work365apps.com/documentation/billing/work-365-providers/configuring-providers/ - Configure your connection with Partner Center (Direct Bill Partners only).
https://help.work365apps.com/documentation/billing/work-365-providers/configuring-microsoft-partnercenter-provider/ - Review the QuickStart guide.
https://help.work365apps.com/documentation/billing/quickstart/