For Dynamics 365 and SharePoint
Roles change. SharePoint access doesn't.
Doclave keeps SharePoint access in step with the roles in Dynamics 365, and records every change as evidence.
Who in your organisation can still open the files of a role they left last month?
Dynamics 365
Anna
Finance →
Sales
SharePoint · new site
Finance
Access removed
Sales
Access granted
Projects
No change
Role change · Finance → Sales · Access updated · Ref 7f3a…c21
✓ Recorded
Illustrative view
01 — See it end to end
One role change, followed all the way.
Anna moves from Finance to Sales. Follow that one change from Dynamics 365 to the evidence log.
Who can open what, and why?
▶
Watch · 1:45 · captions on
Chapters · Anna, Finance → Sales
In Dynamics 365
You change her role. That is the only change you make.
Avoid: a second system to update by hand
In SharePoint
Her access follows the role, on a new site Doclave manages. Your existing site stays as it is until you retire it.
Avoid: access that outlives the role
In Copilot
Copilot finds only what SharePoint lets her open. Finance files leave her results with her access.
Avoid: Finance files in a Sales chat
In the evidence log
The change is recorded and traced to the role behind it.
Avoid: rebuilding evidence before the audit
02 — See your own result
This is what you see on day one.
Install Doclave and the assessment shows where your access and your roles disagree. Every finding says whether Doclave closes it, or what your team needs to do.
Sample findings · illustrative
Contoso Ltd · readiness assessment
Overall
62%
Checks passed
18/30
Findings
5
Users keep folder access after a role change
Doclave closes this
Folders shared outside any Dynamics 365 role
Doclave closes this
Guest accounts without an end date
Your action
03 — By role
Start with your question.
04 — Why now
NIS2 makes access a management question.
Access control is one of the measures NIS2 requires. Management answers for it, and the fines are set in the directive.
Management · Art. 20
Management bodies approve and oversee cybersecurity measures, and can be held liable.
Fines · Art. 34
Up to €10M or 2 % of worldwide annual turnover for essential entities. Up to €7M or 1.4 % for important entities. Whichever is higher. National law can set them higher.
Access control · Art. 21(2)(i)
Access control is one of the measures the fines apply to. It is what Doclave keeps in step with your roles.
NIS2 Directive (EU) 2022/2555 · applies as transposed into national law
05 — Before you ask
The answers your review will ask for.
Works with
Dynamics 365 and SharePoint Online in the same tenant.
Frameworks
Supports alignment with NIS2, DORA, GDPR, ISO 27001, SOC 2, CIS and Microsoft security baselines. Every check is mapped to each framework it applies to.
Trial
Free for 30 days, with a review of your findings halfway through.
Company
Doclave ApS, a Danish company. Hosted in the EU.
Security contact
security@doclave.com
Open the Trust Center →
Permissions and why we need them, hosting, sub-processors and policies.
See it with us. Or start it yourself.
Book a demo with your IT lead, or start a free 30-day trial with a review of your findings halfway through.
