Browse plug-in components
Review plug-in packages and assemblies in separate lists. Filter by solution, search and sort the inventory, and open component details or export files for local investigation.
Power Platform ToolBox
Managed Identity Wizard for Dataverse Plug-ins
Inspect Dataverse plug-in packages and assemblies, review signatures, calculate managed identity subjects, and manage identity associations with clear validation built in.
Install Power Platform ToolBox first if it is not already on your device. Download Power Platform ToolBox
The inspector keeps the Dataverse connection, component inventory, and recent activity in view.
Review and configure Dataverse managed identities
The wizard helps administrators and developers investigate plug-in packages and assemblies, understand their signing state, and configure managed identities for signed custom code.
Inspect signatures and certificates
Check whether a package or assembly is signed, review signer and certificate-chain details, and calculate the managed identity subject identifier from the signed component.
Manage identities with guardrails
Create, review, and edit managed identities, see their usage and solution layers, and associate identities only with signed, customizable components.
Package and assembly inventory
Review versions, identifiers, customization state, and managed identity associations. Search, sort, and paginate through large lists, then inspect or export a component when needed.
Managed identity management
Find identity records, review their usage and solution context, and open details to create or edit customizable identities.
A practical inspection workflow
Move from component discovery to identity configuration without losing sight of signing and customization requirements.
- 1
Connect or inspect locally
Connect to a Dataverse environment to load its components, or inspect a local .nupkg or .dll without an active connection.
- 2
Narrow down the inventory
Choose a solution or view all solutions, then refresh the package and assembly lists.
- 3
Review signing details
Inspect a component to review its signature, certificate information, and calculated managed identity subject.
- 4
Manage the association
Review the managed identity and its solution-layer context, then make an allowed assignment or update.
Assignment rules are enforced: an identity can only be assigned or changed when the target component is signed and customizable. Unsigned or non-customizable components show guidance instead of an invalid action.
Manage Dataverse identities in the wizard
Complete the managed identity workflow in one visual interface: connect to Dataverse, select a plug-in package or assembly, inspect its signature and certificate, then create or review identities and manage eligible associations. Administrators and makers can do these steps in the wizard without running PAC commands or manually entering component GUIDs.
Microsoft's preview CLI command for FIC values
Microsoft's Power Platform CLI includes the preview pac managed-identity show-fic command to calculate and display federated identity credential (FIC) values for a Dataverse component. PAC requires the component's Dataverse record GUID and type as command-line arguments, so you must find and copy the GUID into the command rather than select the component from a visual inventory.
pac managed-identity show-fic --component-id <component-guid> --component-type PluginAssembly- Required: the component's Dataverse record GUID and component type, such as
PluginAssembly,ServiceEndpoint, orCopilotStudio. - Environment: optionally pass an environment GUID or absolute HTTPS URL. Without it, the command uses the active organization in the current authentication profile.
- FIC version: version 1 uses CN-based paths. Version 2 uses SHA-256-hashed paths, which support certificates with special characters. If omitted, the command uses the version saved on the managed identity record.
Read the Microsoft Power Platform CLI show-fic reference for the full command syntax and current preview details.
Dataverse managed identity wizard questions
What does the wizard do for Dataverse plug-ins?
It helps you inspect plug-in packages and assemblies, review signing and certificate details, calculate managed identity subject identifiers from signed components, and manage identity records and associations.
Can I inspect a plug-in file without connecting?
Yes. Open a local .nupkg or .dll to inspect its signing details and managed identity subject without an active Dataverse connection.
When can I assign a managed identity?
The target plug-in component must be signed and customizable. The wizard shows guidance when either requirement is not met.
Where can I find the Dataverse setup steps?
See the Microsoft Learn guide to setting up Power Platform managed identity for Dataverse plug-ins and packages for the platform prerequisites and configuration process.
See the wizard in action
Explore connected, filtered, and inspection scenarios in Storybook, or browse the source and project documentation on GitHub.