For Dynamics 365 and SharePoint
Your business changes. Access should follow.
Doclave connects Dynamics 365 and SharePoint. When responsibilities change, document access follows automatically, and every change is recorded as evidence.
Who in your organisation can still open the files of a role they left last month?
Illustrative view
01 — Followed all the way
A change in responsibility, followed all the way.
Anna moves from Finance to Sales. Her role changes in Dynamics 365, and Doclave carries the change through to SharePoint, Copilot and the evidence log.
Who can open what, and why?
▶
Watch · 1:45 · captions on
Chapters · Anna, Finance → Sales
In Dynamics 365
Anna’s role changes, directly or through Entra ID. That is the only change anyone makes.
Avoid: a second system to update by hand
In SharePoint
New access is granted. Access from her old role is removed.
Avoid: access that outlives the role
In Copilot
Copilot finds only what Anna can open. Finance files leave her results with her access.
Avoid: Finance files in a Sales chat
In the evidence log
The change is recorded with the event behind it, ready when the auditor asks.
Avoid: rebuilding evidence before the audit
02 — See your own result
This is what you see on day one.
Install Doclave and the first report shows where your setup falls short of your compliance frameworks, ranked by severity.
Sample report · demo environment
NIS2 · first report
NIS2 score
30%
Checks passed
11/40
Errors
13
Application identities with access have incomplete review context
High · Asset management
Application user has an administrator role
High · Application security
03 — By responsibility
Start with what you’re responsible for.
Not sure where to start? Pick your area and find the answers that matter to you.
04 — Why now
NIS2 makes access a management question.
Access control is one of the measures NIS2 requires. Management answers for it, and the fines are set in the directive.
Management · Art. 20
Management bodies approve and oversee cybersecurity measures, and can be held liable.
Fines · Art. 34
Up to €10M or 2 % of worldwide annual turnover for essential entities. Up to €7M or 1.4 % for important entities. Whichever is higher. National law can set them higher.
Access control · Art. 21(2)(i)
Access control is one of the measures the fines apply to. It is what Doclave keeps in step with the roles in Dynamics 365.
NIS2 Directive (EU) 2022/2555 · applies as transposed into national law
05 — Before you ask
The answers your review will ask for.
Works with
Dynamics 365 and SharePoint Online in the same tenant.
Frameworks
Supports alignment with NIS2, DORA, GDPR, ISO 27001, SOC 2 and CIS, and checks against Microsoft security baselines.
Trial
Free for 30 days, with a review of your findings halfway through.
Company
Doclave ApS, a Danish company. Hosted in the EU.
Security contact
security@doclave.com
Open the Trust Center →
Permissions and why we need them, hosting, sub-processors and policies.
See it with us. Or try it yourself.
Book a demo with your IT lead, or start a free 30-day trial with a review of your findings halfway through.
