--- title: "Dynamics 365 Agent Readiness & Controls Review — is your Finance & Supply Chain Management ready for AI agents?" canonical_url: "https://cognilium.ai/dynamics-365/agent-readiness-review" slug: "dynamics-365/agent-readiness-review" section: "dynamics-365" page_type: "pillar" date_modified: "2026-10-20" description: "A free ninety-minute readiness check, a five-day Readiness & Controls Review (readiness verdict against Microsoft’s MCP server prerequisites, data and customization gap list, role and segregation-of-duties check, controls gap list in auditor terms, credit forecast with a costed next step), and a one-week read-only pilot on the customer’s own data." publisher: "Cognilium AI" author: "Mudassir Marwat" person_same_as: - "https://www.linkedin.com/in/mudassir-marwat/" - "https://orcid.org/0009-0008-1927-2598" - "https://github.com/mudassirmarwat" - "https://medium.com/@mudassir-marwat" - "https://www.youtube.com/@mudassir-marwat" - "https://dev.to/mudassirmarwat" - "https://hashnode.com/@mudassirmarwat" - "https://huggingface.co/mudassirmarwat" - "https://bsky.app/profile/mudassir-marwat.bsky.social" - "https://substack.com/@mudassirmarwat" - "https://topmate.io/mudassirmarwat" - "https://fueler.io/mudassirmarwat" - "https://www.instagram.com/mudassirmarwat/" - "https://www.facebook.com/mudassir.marwat" - "https://www.reddit.com/user/mudassirmarwat/" - "https://www.f6s.com/member/mudassir-marwat" - "https://cognilium.ai/founder" answers: - "What is a Dynamics 365 agent readiness assessment?" - "Is our Dynamics 365 Finance & Supply Chain Management ready for AI agents?" - "Which Dynamics 365 versions can run AI agents through the ERP MCP server?" - "Which agent platforms are allowed to connect to Dynamics 365 by default?" - "What permissions does an AI agent have in Dynamics 365?" - "How much do Dynamics 365 agent tool calls cost, and how is it forecast?" - "What does a read-only agentic ERP pilot look like?" - "Does Cognilium replace our Dynamics 365 implementation partner?" entities: - name: "Microsoft Dynamics 365" id: "https://cognilium.ai/#entity-dynamics365" url: "https://www.microsoft.com/en-us/dynamics-365" same_as: - "https://www.wikidata.org/wiki/Q27556059" - "https://en.wikipedia.org/wiki/Microsoft_Dynamics_365" - name: "Microsoft" id: "https://cognilium.ai/#entity-microsoft" url: "https://www.microsoft.com" same_as: - "https://www.wikidata.org/wiki/Q2283" - "https://en.wikipedia.org/wiki/Microsoft" - name: "Microsoft Power Platform" id: "https://cognilium.ai/#entity-powerPlatform" url: "https://www.microsoft.com/en-us/power-platform" same_as: - "https://www.wikidata.org/wiki/Q106253893" - "https://en.wikipedia.org/wiki/Microsoft_Power_Platform" related: - "https://cognilium.ai/dynamics-365" - "https://cognilium.ai/dynamics-365/agents" - "https://cognilium.ai/dynamics-365/mcp-server" - "https://cognilium.ai/dynamics-365/po-receipt-chase-agent" - "https://cognilium.ai/dynamics-365/aged-grni-investigation-agent" - "https://cognilium.ai/agentic-erp" - "https://cognilium.ai/dynamics-365/consulting" --- # Dynamics 365 Agent Readiness & Controls Review — is your Finance & Supply Chain Management ready for AI agents? Most Dynamics 365 agent programmes stall before the first agent is switched on, and none of it is the AI. The version is below the MCP server's minimum, the environment is the wrong tier, the users who will invoke agents carry roles with segregation-of-duties conflicts, the posting setup the first-party agents depend on is incomplete in two legal entities, and nobody has priced the tool calls. The Agent Readiness & Controls Review finds all of that in five days on your own Finance & Supply Chain Management, and hands back a verdict, a gap list and a costed next step. It starts with a free ninety-minute check on one process, and it can continue as a one-week read-only pilot on your overdue purchase orders or your aged GRNI, with no change to anything in your ERP. ## Three steps, each one small enough to say yes to Every step ends in a document you keep, whether or not the next step happens. ### Step 1 — Agent Readiness Check (One ninety-minute call) One process, your Dynamics 365 version and environment, the agents you are considering. You get a one-page playback with a red, amber or green verdict on readiness and the single thing that would move it. No cost, no obligation. ### Step 2 — Agent Readiness & Controls Review (Five days on your environment) Five deliverables: the readiness verdict against Microsoft's prerequisites; the data and customization gap list; the role and segregation-of-duties check for every user who will invoke an agent; the controls gap list in the terms your auditors use; and a credit forecast with a costed next step. Fixed scope. Quoted before it starts. ### Step 3 — Read-only pilot (One week on your own data) The PO Receipt Chase Agent or the Aged GRNI Investigation Agent runs read-only against a sandbox copy of your environment: it lists, groups and explains, and changes nothing. You see your overdue lines or your aged GRNI the way the agent sees them, before any write is on the table. No change in Dynamics 365. Scoped from the review. ## What the five-day review checks, item by item Each line is something Microsoft documents as a prerequisite, a limit or a customer responsibility. Read on the date at the top of the page. | Deliverable | What we check | Why it decides the outcome | | --- | --- | --- | | Readiness verdict | Finance & Supply Chain Management version and quality update against the ERP MCP server's minimum (10.0.47, or 10.0.46 PQU-2, or 10.0.45 PQU-7); environment tier (Tier 2 or above, or a Unified Developer Environment; not a cloud-hosted environment); the MCP feature flag; the Allowed MCP Clients list. | Below the minimum or on the wrong tier, no agent can connect. The allowed-clients list is the first governance control and is usually still at Microsoft's defaults. | | Data and customization gap list | Posting profiles, bank and tax setup per legal entity for the Account Reconciliation Agent; order links and planning data for the Procurement Agent; your X++ classes and ISV modules against what data and form tools can reach; custom controls form tools skip. | First-party agents inherit your setup and go noisy on incomplete posting profiles. Your own logic is invisible to agents until it is registered as an action tool. | | Role and segregation-of-duties check | The roles, duties and privileges of every user who will invoke an agent; conflicts an agent would inherit; the System agent role and scoped roles for autonomous agent identities. | An agent acting for a user can do everything that user can do. Agent-only roles arrive in preview in October 2026 and still need a design per legal entity. | | Controls gap list, in auditor terms | Approval before any write, read-back after it, the action ledger and its retention beyond Microsoft's default agent history, where data goes after the MCP server returns it (the agent client and the model), data policies and managed environments. | Microsoft provides no audit mapping for agent actions and states that data handling after the server depends on the client. Your auditors will ask; this is the answer written down. | | Credit forecast and costed next step | Tool calls per transaction for the agents in scope, Copilot Studio versus other clients, the Finance Premium and Supply Chain Management Premium exemption, a spending ceiling; then the scope and length of activation or a pilot. | Copilot Studio bills a fixed rate per agent action; other clients are metered per tool call. The design decides the bill, and the CFO wants it before go-live, not after. | ## Who asks for it, and what they get back ### CFO or controller The cost per process before go-live, and which close exceptions an agent would actually clear on your setup. ### Dynamics administrator or IT Version, tier, feature flags, allowed clients and agent identities, checked against Microsoft's pages rather than a vendor deck. ### Internal audit The controls gap list: approvals, ledger, retention, data handling, roles. Written so it can be tested. ### Your implementation partner A scope they can run with. We do not replace the partner that owns your Dynamics 365; the review hands them a list. ## Agent readiness on Dynamics 365, answered plainly ### What is a Dynamics 365 agent readiness assessment? A short review of whether your Finance & Supply Chain Management estate can run AI agents safely: version and environment against the ERP MCP server's prerequisites, the Allowed MCP Clients list, the roles and segregation-of-duties conflicts of the users who will invoke agents, the posting and master-data setup the first-party agents depend on, your customizations against what agents can reach, the controls an auditor will test, and the tool-call cost of the design. Ours takes five days and produces five documents. ### Is the readiness check really free? The first step is one ninety-minute call on one process, and it costs nothing and commits you to nothing. You get a one-page playback with a verdict. The five-day review is a fixed scope, quoted before it starts. ### Does the pilot change anything in our ERP? No. The read-only pilot runs an agent against a sandbox copy of your environment and it lists, groups and explains only. The PO Receipt Chase Agent shows your overdue lines by buyer; the Aged GRNI Investigation Agent explains your old accruals. No receipt is posted and no record is changed until a later, separately approved step. ### Which Dynamics 365 versions can run AI agents through the MCP server? Per Microsoft Learn, the dynamic ERP MCP server needs finance and operations apps version 10.0.47, or 10.0.46 with PQU-2, or 10.0.45 with PQU-7, on a Tier 2 or higher environment or a Unified Developer Environment. It is not supported on cloud-hosted environments. The review checks this first, because nothing else matters until it passes. ### Which agent platforms can connect to our Dynamics 365 by default? Microsoft's security documentation lists Copilot Studio, Visual Studio Code, Microsoft Cowork, Finance Agent and Finance Agent (Sydney) as allowed by default. Any other platform is registered in Entra ID and added to the Allowed MCP Clients form by your administrator. We check what is on the list and whether anything is there that nobody decided. ### What permissions does an agent have? The permissions of the identity it runs as. Microsoft states the MCP server adds no privileges and that a user can never do more through it than in the application client. That is also the risk: a user with a segregation-of-duties conflict hands it to every agent acting for them. The role check is the part of the review that most often changes the plan. ### Do you replace our Dynamics 365 partner? No. The partner owns the implementation; we review the estate for agents and hand back a list anyone can run. Where the next step is building an action tool or an agent, we do that on your environment and the partner keeps the ERP. ### What happens after the review? You get the costed next step in writing: a read-only pilot, the activation of a Microsoft agent on a fixed setup, an action tool for your own logic, or nothing, if the review says the estate is not ready. The verdict is the deliverable, not the sale. --- Canonical HTML: https://cognilium.ai/dynamics-365/agent-readiness-review