Protect Microsoft Dataverse with DataSunrise
DataSunrise 12.0 adds support for Microsoft Dataverse, the data platform behind Power Platform and Dynamics 365. You can now audit queries, run data discovery, and apply dynamic masking to Dataverse tables.
Challenges in Dataverse Auditing and Visibility
Dataverse stores customer records, financial data, case management data, and other sensitive information that Power Apps, Power Automate, and Dynamics 365 applications rely on. Microsoft has built-in access controls, but if you need independent audit trails of who is querying what exactly, or you need to find where PII and regulated data lives across your Dataverse environment, you may require a more comprehensive solution.
How the Connection Works
Dataverse has a TDS (Tabular Data Stream) endpoint that gives you read-only SQL access to its tables. It speaks the same protocol as Microsoft SQL Server, so DataSunrise connects to it the same way.
To set it up:
- Enable the TDS endpoint in the Power Platform admin center (Environments > Settings > Product > Features)
- In DataSunrise, add a database with type MS SQL Server
- Set the hostname to your environment URL (e.g.,
yourorg.crm.dynamics.com), port5558 - Use Azure Active Directory authentication
- Test and save
Supported Capabilities
Real-time audit logs all SQL queries hitting your Dataverse tables through the proxy. Data discovery scans tables to find and classify sensitive data (PII, PHI, financial records, etc.). Dynamic masking obfuscates sensitive fields in query results based on the connecting user.
Since the TDS endpoint is read-only, features that need write access are not available. No static masking, no INSERT/UPDATE/DELETE statements will be available through the proxy on launch due to this limitation.
Fits into Existing Microsoft Coverage
DataSunrise already supports Azure SQL Database, Azure Synapse Analytics, and Microsoft SQL Server. Dataverse fills in the Power Platform piece, so you can manage security policies for your Microsoft data stack in one place.
See the Configuring a Microsoft Dataverse Connection section in the updated User Guide for setup details.
