In Tip 844 we talked about the Dynamics 365 service admin role in Office 365, which allows people who aren’t Office 365 global administrators to manage Dynamics instances, copy sandboxes, and other administrator features.

So if you give someone the Service Admin role and they don’t see the ability to do something like copy an environment, one thing to check is the security group associated with the instance.

1. In Office 365 Admin Console, go to Settings>Services & Add-ins>Dynamics 365>Manage your Dynamics 365 Settings
2. Select the instance and click “Edit”
3. Verify if there is a security group selected in the “Security Group” field for the instance.

If there is a security group selected for the instance, the Dynamics 365 Service Administrator must be a member of the group to manage the instance.