DV Identity Manager

Manage Dataverse identity participation inside VS Code using a preview-first workflow.

Version 1.0.4

DV Identity Manager is a focused DV ForgeLab utility for searching Dataverse identities, reviewing participation, staging assignment/membership changes, previewing them, and applying them deliberately.

It is intentionally about participation, not authority.

DV Identity Manager manages assignments and memberships. It does not edit privileges, calculate effective access, simulate RBAC, or determine security authority.

Changes are staged locally, validated, previewed, and only applied when explicitly confirmed.

Highlights

• Identity Browser for users, teams, and application users
• Current participation view for roles and team memberships
• Browser-driven staging for assign/remove operations
• Definition staging
• Preview-first validation workflow
• Shared DV ForgeLab workspace import/export via .dvforgelab/dvim/exports
• JSON import and export
• CSV import and export
• Environment-aware classification indicators
  • 🔴 Production environments
  • 🟠 SIT / UAT / Test environments
  • ⚪ Development environments
• Explicit apply semantics
• Execution reporting and outcome tracking
• Shared DV ForgeLab Dataverse environment settings
• Direct DV ForgeLab feedback integration

Screenshots

Identity Browser

Search users, teams, and application users, then open participation management with a single click.

Participation Management

Review current participation, stage role assignments and team membership changes, and prepare preview-first updates.

Preview and Execution Reporting

Validate staged participation, preview Dataverse mutations, apply explicitly, and review execution outcomes.

Preview-first workflow

Connect
↓
Search identity
↓
Manage participation
↓
Stage changes locally
↓
Validate
↓
Preview
↓
Apply participation changes
↓
Review execution report

Supported Participation Types

• User → Role assignments
• User → Team memberships
• Team → Role assignments
• Application User → Role assignments
• Application User → Team memberships

Boundary

DV Identity Manager is intentionally a participation manager, not a security analysis tool.

It does not:

• Create roles
• Edit role privileges
• Display privilege matrices
• Calculate effective permissions
• Simulate RBAC
• Move business units
• Manage business unit hierarchy
• Perform security diagnostics
• Recommend access changes

Shared DV ForgeLab Workspace

DV Identity Manager follows the DV ForgeLab workspace-first convention:

Workspace-first. Dialog when necessary.

When a VS Code workspace is available, Import... and Export... automatically use:

.dvforgelab/
  dvim/
    exports/

When no workspace is available, DVIM automatically falls back to the operating system file picker or Save dialog.

DVIM supports importing:

• DVQR reconstruction artifacts (*.dvim.json)
• DVIM definition exports (dvim-*-definitions-*.json)
• DVIM CSV definition exports (dvim-*-definitions-*.csv)

DVIM-owned definition exports use deterministic filenames:

dvim-{identity}-definitions-{yyyyMMdd-HHmmss}.json
dvim-{identity}-definitions-{yyyyMMdd-HHmmss}.csv

DVQR-generated reconstruction artifact naming remains distinct, for example:

DVIM-admin-20260626-103001.dvim.json

Shared DV ForgeLab environment settings

"dvForgeLab.environments": [
  {
    "name": "DEV",
    "url": "https://org.crm6.dynamics.com",
    "tenantId": "optional-tenant-id"
  }
]

Command

DV Identity Manager: Open Identity Manager

Feedback

DV Identity Manager includes direct integration with the DV ForgeLab feedback portal.

Share:

• Feature requests
• Bug reports
• Identity participation reconstruction scenarios
• Workflow suggestions
• Product feedback

Feedback is routed through the shared DV ForgeLab feedback experience and automatically identifies DV Identity Manager as the source product.

https://www.dvforgelab.com/feedback

Philosophy

DV Identity Manager follows the DV ForgeLab preview-first invariant.

Identity participation changes are staged locally, validated, previewed, and explicitly applied by the user. Dataverse identity participation is never changed without an explicit preview and confirmation step.

Validation & Platform Awareness

DVIM validates participation definitions before preview and apply.

Validation surfaces:

• Missing identifiers
• Unsupported participation combinations
• Managed application-user warnings
• Access-team role assignment restrictions
• Definition import diagnostics
• Duplicate and merged participation definitions

DVIM does not bypass Dataverse protections. Platform-level restrictions are surfaced during execution reporting.

DV Quick Run Integration

DV Quick Run can generate .dvim.json reconstruction artifacts from Cross-Environment Diff and Timeline Reconstruction findings.

DV Identity Manager imports these artifacts, validates them, stages participation changes, previews the resulting operations, and applies them only after explicit confirmation.

DV Quick Run investigates.

DV Identity Manager reconstructs.

Investigation and reconstruction remain separate concerns.

Built By

Built by DV ForgeLab.

DV Identity Manager is part of the DV ForgeLab Dataverse tooling ecosystem.

DV Quick Run investigates.

DV Identity Manager reconstructs.

Investigation and reconstruction remain separate concerns.

DV Quick Run remains the flagship Dataverse investigation workbench.

VS Code Marketplace:

https://marketplace.visualstudio.com/items?itemName=dv-forgelab.dv-quick-run