--- sourceDocument: Xanadu IT Asset Management sourceDocumentLink: https://www.servicenow.com/docs/r/xanadu/it-asset-management Release : - xanadu ft:locale : - en-US ft:publication_title : - Xanadu IT Asset Management ft:clusterId : - itam bundleId : - itam workflow : - Technology --- # Integrating with Microsoft Dynamics 365 and Power Apps # Integrating with Microsoft Dynamics 365 and Power Apps {#ariaid-title1} * Release version: Xanadu * * Updated August 1, 2024 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 6 minutes to read Integrating your ServiceNow instance with the Microsoft Dynamics 365 and Power Apps service enables you to track your software subscriptions and to reclaim unused licenses. Important: This integration retrieves user subscription details for all Microsoft Dynamics 365 and Power Apps products. Furthermore, Software Asset Management provides license compliance for the products using user subscription-based models. For optimization, Software Asset Management automatically tracks the last activity date and identifies low-usage for the following applications: * Dynamics 365 for Sales (Professional, Premium, Enterprise) * Dynamics 365 for Customer Service (Enterprise Attach to Qualifying Dynamics) * Dynamics 365 for Team Members {#integrating-with-microsoft365__ul_ftf_w2l_hrb} For more information about the Microsoft 365 service, see [Microsoft 365 frequently asked questions](https://www.microsoft.com/en-in/microsoft-365/microsoft-365-for-home-and-school-faq). Important: Minimize security risks and protect information by granting access only to the necessary user or API permissions.{#integrating-with-microsoft365__table_box__entry__3} | Process | Required user role in the Microsoft Dynamics 365 and Power Apps application | Authentication scopes | |-|-|-| | Download subscriptions | * Global administrator * Dynamics 365 administrator {#integrating-with-microsoft365__ul_jcb_4qb_ybc} | * Organization.Read.All * User.Read.All * user_impersonation {#integrating-with-microsoft365__ul_kcj_bgq_pbc} | | Pull user activity | Dynamics 365 administrator | user_impersonation | [Table 1. Minimal user permissions] {#integrating-with-microsoft365__box-title} ## Set up Microsoft Azure Active Directory {#ariaid-title2} Set up Microsoft Azure Active Directory (AD). ### Before you begin Role required: Global administrator and Dynamics 365 administrator in Microsoft admin center ### Procedure 1. Log in to the Microsoft Azure portal using an admin account and navigate to Azure Active Directory. 2. Navigate to the App registrations section and select App registration under + Add. 3. On the Register an application form, fill in the fields. {#setup-ms-azure-ad__table_oqq_3cy_y2c__entry__2} | Field | Description | |-|-| | Name | Name of the application that you want to register. | | Supported account types | The account with the required organizational directory. | | Redirect URI | URL that will access Azure. Typically the URL of the ServiceNow instance. Important: You must select Web in the Select a platform drop-down list because Azure AD app must be a web application in App registration for this setup. | [Table 2. Register an application form fields] {#setup-ms-azure-ad__table_oqq_3cy_y2c} 4. Select Register. 5. Open the application that you registered and navigate to the Overview section. 6. Collect the Application (client) ID and Directory (tenant) ID. 7. Navigate to the Certificates and Secrets section. 8. Create a client secret and collect the client secret key. You need the client secret key while configuring your ServiceNow instance. 9. Under API Permission, select + Add a permission and then select APIs my organization uses. 10. Select Microsoft Graph and add the following Delegated Permissions. * `Organization.Read.All` * `User.Read.All` * `Offline_access` {#setup-ms-azure-ad__ul_ix4_ygm_kqb} 11. Select Dynamics CRM and add the following permission. `user_impersonation` 12. Under Grant consent, select Grant admin consent. 13. In the Authentication section, under the Redirect URI, enter the redirect URI of the ServiceNow instance. ## Set up Microsoft Dynamics 365 and Power Apps {#ariaid-title3} Set the system-level settings for Microsoft Dynamics 365 and Power Apps. ### Before you begin Role required: admin ### Procedure 1. Go to . 2. Under Environments, select the environment for which you want to pull the dynamics activities. 3. From the top ribbon, select Settings. 4. Select Audit and logs. 5. Select the following check boxes. * Start Auditing * Log access * Read logs {#setup-ms-dynamics-365__ul_nl2_35c_lqb} 6. Select Additional Audit Settings. 7. From the Settings list, select Auditing. 8. Select Global Audit Settings. 9. Select the following check boxes. * Start Auditing * Audit user access * Start Read Audit * Common Entities * Sales Entities * Customer Service Entities {#setup-ms-dynamics-365__ul_zpc_55c_lqb} 10. Select OK. ## Set up ServiceNow instance for Microsoft Dynamics 365 and Power Apps {#ariaid-title4} Set up ServiceNow instance for Microsoft Dynamics 365 and Power Apps to track your software subscriptions and to reclaim unused licenses. ### Before you begin Role required: admin or sam_integrator ### About this task If you're using Software Asset Workspace, the option to create the Microsoft Dynamics 365 and Power Apps integration profile in Core UI is inactive. ### Procedure 1. Navigate to the integration profile. | Interface | Action | | Core UI | 1. Navigate to AllSoftware AssetSaaS LicenseDirect Integration Profiles. 2. Select New. 3. Select Microsoft Dynamics 365 and Power Apps Integration Profile. {#setup-servicenow-instance-for-ms365__ol_ijd_bjk_qtb} | | Software Asset Workspace | 1. Navigate to License operationsUser SubscriptionsDirect integration profiles. 2. Select New. 3. Select Microsoft Dynamics 365 and Power Apps from the drop-down list. 4. Select Continue. {#setup-servicenow-instance-for-ms365__ol_wjd_bjk_qtb} | |-|-| {#setup-servicenow-instance-for-ms365__choicetable_o3p_z3k_qtb} 2. In the Display name field, enter a name of your choice. 3. Under the Calculate Activity Subflow tab in the Analyze user activity from field, select the date since when you want to pull the activity. 4. Select Save. A draft integration profile is created. In the Download Subscription Subflow tab, the Connection \& Credential field appears and is automatically set to sn_ms_365_spoke.Microsoft_365_Graph. In the Calculate Activity Subflow tab, the Connection \& Credential field appears and is automatically set to sn_ms_365_spoke.Microsoft_365_Dynamics. 5. Under the Download Subscription Subflow tab, beside the Connection \& Credential field, select the preview (![preview icon]()) icon. 6. Under the Please Enter the Credential Information section, enter the values you received from [Set up Microsoft Azure Active Directory](https://www.servicenow.com/docs/8SMATTj8BCt8PZJI39PFug#setup-ms-azure-ad "Set up Microsoft Azure Active Directory (AD)."). 1. In the Tenant ID field, enter your Tenant ID. 2. In the OAuth Client ID field, enter the OAuth Client ID. 3. In the OAuth Client Secret field, enter the OAuth Client Secret key. {#setup-servicenow-instance-for-ms365__substeps_nxc_qkd_lqb} Important: You must configure both the Download Subscription and Calculate Activity subflows to ensure both jobs complete successfully. 7. Select Create and Get OAuth Token. Important: This step must be executed by a user with the Global administrator role in the Microsoft admin center. 8. If you're prompted to log in to your Microsoft 365 account, enter your Microsoft 365 credentials and log in to your Microsoft 365 account. 9. Under the Calculate Activity Subflow tab, beside the Connection \& Credential field, select the Preview (![Preview]()) icon. 10. Select Create New connection and credential alias. 11. In the Create Connection and Credential window, perform the following. 1. In the Connection URL field, enter the connection URL. To fetch the Connection URL, log in to the Microsoft Admin portal and navigate to Admin CentersAll admin centersSelect Dynamics 365 appsEnvironments. Select the environment that you want to integrate with. The environment URL is the Connection URL. 2. In the OAuth Client ID field, enter the OAuth Client ID. 3. In the OAuth Client Secret field, enter the OAuth Client Secret key. {#setup-servicenow-instance-for-ms365__substeps_pzy_4md_lqb} 12. Select Create and Get OAuth Token. Important: This step must be executed by a user with the Dynamics 365 administrator role in the Microsoft admin center. 13. Return to the integration profile. 14. Select Publish. 15. In the Publish Confirmation dialog box, select OK. ### What to do next After the integration connects, your ServiceNow instance automatically creates software models, reclamation rules, and software subscriptions that are refreshed daily. If you want to set up multiple integration profiles with unique connections, create child aliases to manage different configurations and settings for each integration profile. For more information, see [Create a child alias to set up multiple integration profiles](https://www.servicenow.com/docs/ank2kL8kWf4RhxBVQvFw5g "Create a child alias to set up multiple integration profiles with unique connections and manage different configurations for each integration profile."). Review all automatically generated reclamation rules to reclaim user subscriptions. For more information, see [Review a software reclamation rule](https://www.servicenow.com/docs/nAflLzIGyHaK_OpPmTYTvw "Use reclamation rules to cancel user subscriptions that have limited to no activity."). Create software entitlements for the automatically generated software models to track used software against owned software. * For more information on creating software entitlements in the Software Asset Management Core UI, see [Create entitlements in Software Asset Management classic](https://www.servicenow.com/docs/MAohEZPg4SjZLPTVioRdog "Create entitlements in the Software Asset Management application classic to record your license details and allocate purchased software rights to users or devices."). * For more information on creating software entitlements in the Software Asset Workspace, see [Create entitlements in workspace](https://www.servicenow.com/docs/Jh~FO6x8BChwOmSEDyY0kA "Create entitlements in the Software Asset Workspace to enter your license details and allocate purchased software rights to users or devices."). * For more information on creating software entitlements using the Software Asset Management Playbook, see [Create entitlements using the guided walk-through](https://www.servicenow.com/docs/Tiy_LA~jOKwaLS2ioqEHRA "Use the guided walk-through playbook for a step-by-step process of creating entitlements."). {#setup-servicenow-instance-for-ms365__ul_cbz_vhr_sqb} Reconciliation also runs on your subscriptions as a scheduled job or on-demand. You can view your reconciliation results in the [License Workbench](https://www.servicenow.com/docs/O_bB4w6fQREuwthkTeWiqg "Review reconciliation results in a simplified workbench view.") (Software Asset Management classic application) or the [License usage view](https://www.servicenow.com/docs/UZ6v3AA1wKSbw~zTb_Xy6w "Use the license usage view as a single plane to understand the license position of all software products, remediate non-compliance, view reconciliation results, view, or add removal candidates, and view Software Asset Management related reports.") (Software Asset Workspace). Use these results to determine your license compliance position and to remediate any non-compliance. * For more information on running reconciliation in the Software Asset Management classic application, see [Run software reconciliation](https://www.servicenow.com/docs/xJni40GL3ctIVn4LYUkVVQ "Reconciliation is run as a scheduled job (default is weekly), but you can also run reconciliation manually to reconcile software products in your environment on demand."). * For more information on running reconciliation in the Software Asset Workspace, see [Run software reconciliation in the workspace](https://www.servicenow.com/docs/F4t9mIl3Z6yakXJGjLthTg "Reconciliation is run as a scheduled job (default is weekly), but you can also run reconciliation manually to reconcile software products in the Software Asset Workspace environment on-demand."). {#setup-servicenow-instance-for-ms365__ul_qgf_zhr_sqb} *[\>]: and then