The preview version of Microsoft Dynamics 365 Business Central 2024 Release Wave 2, also known as version 25, has officially ...
Les merDevice licenses with Business Central SAAS - The Last BLOG you'll ever need
Thursday, September 12, 2024
Reading time: 13 minutes
I get asked about device licenses in Business Central on a regular basis, and it’s true, there are quite a couple of BLOGs available out there, but they all cover only a part of the solution, I’ve read many of them multiple times to finally put the full picture together, and finally created a test tenant with one device license so I can see the whole thing work for myself. Once I felt that I had a good comprehensive solution in my mind about everything around the Device Licenses, and I’ve answered at least 50 partner questions around Device Licenses… I decided to put it all into this comprehensive BLOG covering everything that you need to know.
Licensing
Device License Limitations
So, what are all the limitations placed on a device license?
- First User Sign-In: A device user cannot be the first user to sign in to Business Central as mentioned here. An Administrator, Full User, or External Accountant must be the first to sign in to set up the system. What do they mean with this, well I signed out of the system, and the next day I signed in with the Device Licensed user as the first user to sign in for the day, and it worked fine. (I checked the sessions, and the Device User was the only user signed in to Business Central.) I think what they mean is that you cannot purchase just one Device License and use that Device to setup Business Central, you must use one of the other licenses to log in first, setup the system, and then you can add a Device License.
- Concurrent Users: Device users are considered concurrent users as discussed here. This means that when they schedule tasks to run in the Job Que, they are automatically signed in to run their tasks in background sessions and they will consume a license. For this reason, it may not be a good idea to run Jobs as a Device User, we will discuss this later in this article.
- Limited Functionality: Device licenses do not provide all the capabilities of a Full user. They are designed for specific roles such as point of sale, shop floor, or warehouse operations. Now as I mentioned before, this is not a technical limitation imposed by the license itself, but rather it is given as a guideline in the Licensing Guide. Other than the roles mentioned, Point of Sale, Warehouse or Shop Floor Operations, you should not be using the Device License in other scenarios. If you think about these scenarios, this is where one computer can be used by multiple people at different times, and that is why these are the only scenarios where it should be used.
- Scheduled Tasks: Device users could not set up jobs to run as scheduled tasks in the job queue in the past, a LOT of BLOGS out there still refer to this, but as mentioned in point 2, you can now schedule jobs. So, watch out, this is no longer a limitation, but as we will discuss later, consider rather not running scheduled tasks in the Job Que as your Device Users.
So how do I setup and configure Device Licenses?
Don’t stop reading here if you are not technical, we are still going to be discussing a lot of issues around the Device Licenses, but let’s have a look at what do we do to setup these Device Licenses. I said do not assign the licenses to any users, like you would with a normal license, so how do we assign the licenses?
The short answer is you don’t, the licenses are just allocated against the tenant, and like I mentioned above, and Microsoft does in one of their pages, the licenses are considered concurrent. So, every time a device logs into Business Central, it consumes a Device License, until all devices are used up. Let’s set this up, so you can see how this is done, then we can discuss this further, because this does have implications.
This setup you need to do in the Azure Portal, because we are going to create a Security Group, and I’m not sure if you can do this in admin.microsoft.com, but I know how to do it in portal.azure.com… So, log into portal.azure.com and go to Entra, let’s do this:
Image 2: In Portal.azure.com you need to open Microsoft Entra:
Image 3: In Microsoft Entra, open the Groups:
Image 4: Create a new Group, by clicking on the New Group Button:
Image 5: Group Type – Security, give the group a name “Dynamics 365 Business Central Device Users”, and add the Device Users as members to the Group:
Let’s just stop here, I need to highlight, that the group needs to be called “Dynamics 365 Business Central Device Users” exactly as I have here, if you misspell the name, or put a space at the end or get the capital letters wrong, this group is not going to work. It needs to be spelt exactly as I have done here. Click on finish, and your Group is created as below:
Image 6: The Group you have now created:
Now if you go back into Business Central, and you click on the Update users from Microsoft 365 button in the Users page, and follow the steps, it will bring the users across from the Group into Dynamics 365 Business Central. They are now just normal users, and you can assign permissions to these users as you would any other user. The only difference is that they don’t use the normal User license, they will use the Device Licenses assigned to the Tenant. Here are the final steps:
Image 7: Update the users from Microsoft 365 in the Users page:
Image 8: In the wizard, click Next on the first page that appears:
Image 9: You can click View changes if you want to see what users are going to be added in the next page:
Image 10: Once you have reviewed the changes, you can click on the Finish button:
Image 11: Once the changes have been implemented, Business Central will show you that the changes are done:
Image 12: The users are brought across from the Security Group as normal users in Business Central, where they can be assigned permissions like any other user:
Let’s ask some questions.
Q: If the Device Users work like Concurrent Users, won’t users in the USA Warehouse “steal” licenses from users in the NL Warehouse?
A: This could happen yes. If users in the USA log onto 4 computers, then there is only 1 license left for the users in the NL to use. However, you should have 1 device license per device used for users to log on, if there are 4 computers in the USA Warehouse, you should have purchased 4 Device Licenses, as every device that is used for the Device Users to log on, should have a license. If every device is licensed, then you should never have a problem where you run out of licenses.
Q: What if a Device User goes out of the warehouse, and logs onto Business Central on someone else’s computer in the office?
A: Then it will consume a Device License for that device. If a user is a worker in the warehouse, and logs onto BC using the Device in the Warehouse, and he logs onto Computers in the office, he should have a normal Essential or Premium license, and not be licensed as a Device User. This way, when he logs onto a normal computer, he is using his normal user license, and not consuming another Device License.
Q: What if a “normal” user logs onto the Warehouse Computer?
A: If a user with a normal Essential or Premium license log onto the Warehouse Computer, they will not consume one of the Device Licenses, as they are just logging on with a normal user account, and not a Device User.
Q: Why is there a Device table in Business Central? Don’t I have to create my devices in this table?
A: You are correct, in Business Central, there is a Devices table, where you can create your devices that use Device licenses. However, filling in the list of computers in this table, is done just for compliance purposes. It has nothing to do with the license, how they work, or is required. If you use 5 devices, like in the example above, you need to go to the Devices table, and create an entry in the Devices for every device you are going to use to log onto Business Central, this is purely to keep track for yourself, and if you get a license audit, to say which devices the device licenses are for. This does not affect anything in Business Central, or how the licenses work.
Q: Why should I not run Jobs as a Device User?
A: In the past it was not possible to run Jobs as a Device User, but since that has changed, it means that if I am a Device User, and I create a Job to run in the Job scheduler, that Job will run in the background, log me in, and consume one of my Device Licenses. Now, looking at our example scenario above, I have 5 device licenses, if a job kicks off, and is running in the background, it means that only 4 users can log onto devices, and when the 5th device wants to log on, there is no longer a device license for that user to log on with, as the 5th license is being used by a job running in the background.
Q: Does it work the same for Business Central On-Prem?
A: No, for Business Central on-premises, it is a whole different story, there you used to create one username, and password for the Device, and then all users in the Warehouse would use the same username and password to log onto the one device in the Warehouse. This meant that it was not possible to trace what user did what in the system, as all activity was logged under one username and password. With the new way designed for Business Central SAAS, it is possible for every user to log on using his own username and password, and we can trace who did what in the system. Which is a much better way of dealing with Device licenses, and Device users.
Q: Could I theoretically use Device Licenses to do things outside of the stipulated scenarios?
A: Yes, theoretically, this is off course possible having read the rest of my story above.
Q: Should I use Device Licenses to do things outside of the stipulated scenarios?
A: No.
Thank you so much for making it this far, and finishing the entire article, I owe you a gold star for making it this far.
Now if you have any further questions, attend the new release webinar: Microsoft Dynamics 365 Business Central 2024 Release Wave 2: The Functional and Technical Enhancements.
Meet Berny During, our Partner Technology Strategist for Business Central at Companial. With over 27 years of experience as a Microsoft Certified Trainer, he brings a wealth of expertise and knowledge to his role. Starting as a Product Manager at Navision South Africa and subsequently at Microsoft, he later established his own successful partner. Joining Companial as a franchisee in the Middle East-African market, Berny once again played a crucial role in guiding partners to grow and develop their Business Central practices through mentoring and training. He holds qualifications in Business Management, Taxation, Law, Supply Chain Management, and Computer Sciences.
Mer om Business Central
Deep Dive: Managing Updates in Business Central 2024 Release Wave 2
In my previous series of four blogs, I provided an overview of the exciting changes coming to Microsoft Dynamics Business ...
Les merCoPilot Changes in Business Central 2024 Release Wave 2 (v25)
As we delve into the final instalment of our blog series on the upcoming features in Microsoft Dynamics 365 Business ...
Les merArchitectural Enhancements in Business Central 2024 Release Wave 2 (v25)
As we continue our exploration of the upcoming features in Business Central 2024 Release Wave 2 (v25), this third blog ...
Les merFirst Look: Exciting New Development Features in Microsoft Dynamics Business Central 2024 Release Wave 2 (v25)
Microsoft Dynamics Business Central continues to evolve, and the upcoming 2024 Release Wave 2 (v25) is packed with new development ...
Les merFirst Look: Exciting New Features in Microsoft Dynamics Business Central 2024 Release Wave 2 (v25)
Microsoft has recently unveiled a sneak peek into the upcoming Dynamics Business Central 2024 Release Wave 2 (v25), and I ...
Les mer