Question

A backend Azure Function runs on a nightly schedule with no user present. It must write records to Dataverse using the Web API. The security team requires that the integration authenticate without storing or using any interactive user credentials, and each API call must be attributed to a non-interactive identity. What authentication approach should you design?

Accepted Answer

Register an app in Microsoft Entra ID, configure it as an application user in the Power Platform environment, and use the OAuth 2.0 client credentials flow with a certificate.

Answer

Use the OAuth 2.0 authorization code flow with a dedicated service account mailbox and store the refresh token in Azure Key Vault.

Answer

Enable Windows integrated authentication on the Azure Function and pass the machine identity to Dataverse.

Answer

Use the resource owner password credentials (ROPC) flow with the credentials of a licensed named user assigned a system administrator role.