Bank Statement Automatic Reconciliation using Power Automate and SharePoint in D365 Finance and Operations (D365 F&O)

a. Establish the write and delete access to D365 finance and operation in SharePoint.

One time registration process

In Dynamics 365 finance and operations version 10.0.40 and later, when the SharePoint user authentication feature is enabled, your organization needs to perform a one-time setup to use the SharePoint integration for non-interactive batch scenarios. This is because the Microsoft-managed high-trust connection between the finance and operations environment and SharePoint has been deprecated.

With this updated SharePoint authentication mechanism, batch connections utilize application access. As this access is not granted by default for tenants, an Entra ID tenant administrator needs to be manually grant access one time for the tenant. This can be done by running the following PowerShell commands to provide the required application consent for finance and operations batch scenarios to connect to SharePoint.

Run PowerShell as administrator in the local system (any laptops)

Run below codes in PowerShell. Suggested to keep PowerShell latest version, here my version is v7.5.0

My test PowerShell command image

Install the Microsoft Graph

Select the respective folder in the local machine using PowerShell for the installation of the file and run the below command.

Install-Module Microsoft.Graph -Scope CurrentUser

Import the module to run command

Import-Module Microsoft.Graph.Applications

Connect Graph using PowerShell

Connect-MgGraph -TenantId microsoft.onmicrosoft.com -Scopes 'Application.ReadWrite.All'

*Replace the ‘microsoft.onmicrosoft.com’ with user tenant ID.

Once click the enter button for the above command a browser will open for the authentication.

For the authentication, use the azure portal admin account.

Once connected successfully below message will receive:

Activate service principal

Run below 3 lines of command (copy and paste)

# These AppIds do not change as they are the first party application IDs
$erpServicePrincipal = Get-MgServicePrincipal -Filter "AppId eq '00000015-0000-0000-c000-000000000000'"
$sharePointServicePrincipal = Get-MgServicePrincipal -Filter "AppId eq '00000003-0000-0ff1-ce00-000000000000'"
$spAppRole = $sharePointServicePrincipal.AppRoles | where {$_.Value -eq 'Sites.ReadWrite.All'}

# Assign the SharePoint 'Sites.ReadWrite.All' permission to the Microsoft Dynamics 365 finance and operations application
New-MgServicePrincipalAppRoleAssignedTo -ServicePrincipalId $erpServicePrincipal.Id -PrincipalId $erpServicePrincipal.Id -ResourceId $sharePointServicePrincipal.Id -AppRoleId $spAppRole.Id

“Now the Connect with D365 and SharePoint is established for the delete and update“

b. Map the SharePoint in D365

In the default SharePoint server, field mention the SharePoint URL. And click on the Test interactive SharePoint connection and Test batch SharePoint connection.

If the connections are established. Below message will receive.