Grant admin-consent + provision the Application User

Templ8r authenticates to your Dataverse via a multi-tenant Entra app called TechSol. Two one-time admin actions are required before generation works: a Global Admin grants consent for the app to exist in your Entra tenant, then a Dataverse System Administrator creates an Application User mapped to that app inside your D365 environment.

Who needs to do what

• Global Admin (Entra): clicks our consent link, accepts the dialog. ~30 seconds.
• Dataverse System Administrator: signs into the Templ8r portal at app.templ8r.co.uk/onboard/auto and walks through the auto-provisioning wizard. ~2 minutes.

Step 1 — Global Admin grants consent

1. The Global Admin opens the consent URL we sent (or starts the subscribe flow which routes them automatically).
2. Microsoft prompts to authorise the TechSol app in your tenant. Permissions: Microsoft Graph User.Read, Dataverse user_impersonation, plus Power Platform API scopes.
3. Click Accept. The TechSol service principal now exists in your Entra directory.

Step 2 — Provision the Application User in Dataverse

1. Open app.templ8r.co.uk/onboard/auto.
2. Sign in with a Dataverse System Administrator account.
3. Enter the Dataverse URL of the environment you want to onboard (e.g. https://contoso.crm11.dynamics.com).
4. The portal calls Dataverse WhoAmI to confirm access, looks up the System Administrator role at the root business unit, creates an Application User keyed to the TechSol app, and assigns System Administrator to it.
5. You see a green ✓ — your tenant is registered.

What if my user isn't a Global Admin?

Send the consent link to whoever is. The Subscribe form has a "send to colleague" button that emails the link with a return token so they can hand off back to you once consent is granted.

Revoking access

Delete the Application User in your Dataverse. Templ8r calls then 401 immediately. For full off-boarding (data deletion too), see where my data lives.