skills.rest
microsoft
microsoftOFFICIAL
Explore all skills by this author →
Website𝕏@OpenAtMicrosoftGitHub

dv-security

Automate Dataverse security role assignments and self-elevation via PAC CLI.

195|50|Updated Mar 11, 2026
Search Tags:#security#auditing#pac#role-assignment#dataverse#self-elevation
One-click install
npx skills add https://github.com/microsoft/Dataverse-skills --skill dv-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dv-security
Source: https://github.com/microsoft/Dataverse-skills/tree/main/.github/plugins/dataverse/skills/dv-security
Command: npx skills add https://github.com/microsoft/Dataverse-skills --skill dv-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Dataverse security administration often requires careful, auditable management of user roles across environments. This skill automates role assignments and self-elevation using the PAC CLI, reducing manual errors and improving governance. It emphasizes previews and explicit confirmations to prevent destructive changes and ensure compliance.

Core Features & Use Cases

  • Assign security roles to users across environments using pac admin assign-user.
  • Run batch role operations across multiple environments with explicit confirmation and audit-friendly logging.
  • Implement self-elevation workflows with strict risk and reason capture, ensuring actions are auditable in Purview.
  • Enforce safety protocols and provide preview-driven workflows before applying privileged changes.

Quick Start

Preview the action, then run the PAC CLI command to assign a security role.

Frequently Asked Questions about dv-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security role assignments in Dataverse across multiple environments?▼

Automating security role assignments in Dataverse uses the PAC CLI to run batch role operations across multiple environments with explicit confirmation and audit-friendly logging, reducing manual errors and improving governance.

What is self-elevation in Dataverse and when do I need it?▼

Self-elevation in Dataverse is a PAC CLI workflow that grants temporary elevated privileges when standard permissions are insufficient, requiring Global, Power Platform, or D365 Admin rights to execute privileged security changes safely.

Do I need the PAC CLI installed to manage Dataverse security roles?▼

Yes, managing Dataverse security roles requires the PAC CLI installed and authenticated with an active profile, plus System Administrator role or Global, Power Platform, or D365 Admin permissions for self-elevation workflows.

Can I preview security role changes before applying them in Dataverse?▼

Yes, you can preview security role changes before applying them in Dataverse using preview-driven workflows that enforce safety protocols and require explicit confirmation before executing privileged changes via the PAC CLI.

How does Dataverse role assignment auditing work with Microsoft Purview?▼

Dataverse role assignment auditing with Purview captures strict risk and reason data during self-elevation workflows, ensuring every privileged security change executed through PAC CLI is logged and compliant across environments.

What are the limitations of using PAC CLI for Dataverse security administration?▼

PAC CLI for Dataverse security administration requires proper authentication profiles and sufficient admin rights; without Global, Power Platform, or D365 Admin permissions, self-elevation fails, and batch operations require explicit confirmation to prevent destructive changes.

Related Skills

Explore More Legal & Compliance Skills→
promitduttapromitdutta

setup-datamodel

Automate Dataverse table, column, and relationship setup for Power Pages.

Community
Advanced
microsoftmicrosoft
9

asklearn

Search Microsoft Learn for documentation and guidance on Microsoft Purview features.

Official
Basic
BrunoAMSilvaBrunoAMSilva

mcp-deploy-manage-agents

Deploy and manage MCP-based declarative agents in Microsoft 365 admin center.

Community
Advanced
HouseGarofaloHouseGarofalo
3

power-platform

Manage Power Platform solution lifecycle via PAC CLI and CI/CD pipelines.

Official
Advanced