TeamSecurityRoleMapper.XrmToolBox 1.2.5.4

Team Security Role Mapper

An XrmToolBox tool for comparing team security-role assignments in a source Dataverse environment with a target environment, then applying explicitly selected changes.

The tool matches teams by Entra group object ID where possible, falling back to team name plus the relative business-unit path. Security roles are matched by name inside the matched target business unit.

Safety features include a read-only preview, add-only mode by default, blocked ambiguous team mappings, skipped unresolved role issues, one-source-to-many-target manual mapping, one explicit Apply choice per source team, and a separate confirmation before target writes. Exact synchronization, including removals, is opt-in.

Versioned JSON profiles can export and restore source-to-target team mappings, selected rows, and exact-sync mode. Importing a profile never applies changes by itself; the restored preview must still be reviewed and confirmed.

The modernized preview includes case-insensitive source-team search, compact status indicators, clearer matched, actionable, and blocked row states, and an Apply-column sort that groups checked or unchecked source teams without changing their selections.

Selecting a source-team row opens a role-level details panel. It lists every mapped target and each role that will be kept, added, removed, skipped, or blocked, including the exact resolution issue. One-to-many mappings remain grouped in the main preview while the details panel separates their target-specific actions.

Import Config and Export Config manage reusable JSON mapping profiles, while the Export Config menu also offers a complete CSV/HTML preview report. Export Comparison creates a standalone filterable HTML page with one target per checked source row, alphabetized multiline role lists, Added/Removed variations, and issues. Exports run asynchronously and never update Dataverse.

Select Load preview at any time. If a source or target environment is missing, the tool opens the appropriate connection selector and guides you through both selectors when neither connection has been chosen.

Reset preview clears local mappings, selections, search, imported-profile state, and exact-sync mode before reloading read-only data. It does not update Dataverse.

Map targets opens a searchable multi-select list and can map one source team to several targets. The preview keeps one row per source and lists its targets alphabetically, separated by commas. Remove mappings clears every target for the selected source, which then remains explicitly unmapped and cannot be applied. Auto match removes all local overrides for that source and runs the normal matching rules again. These choices are included in JSON profiles.