Utility docs
DV Identity Manager.
Preview-first Dataverse identity participation management inside VS Code. Built for searching identities, importing DVQR .dvim.json artifacts, reviewing participation, staging assignment and membership changes, validation, preview, and explicit apply.
What it is
DV Identity Manager is a focused DV ForgeLab utility for managing Dataverse identity participation. It provides a searchable identity browser for users, teams, and application users, DVQR .dvim.json artifact import, plus preview-first role assignment and team membership workflows.
Why it exists
Identity participation is operationally significant during onboarding, environment reconstruction, service-account setup, drift alignment, and verification work. DVIM keeps participation changes visible and deliberate instead of scattering them across multiple administration screens or treating investigation artifacts as already-applied security changes.
Typical workflow
Supported participation types
User participation
Stage user role assignments and user team membership additions or removals before applying changes.
Team participation
Stage team role assignment changes while preserving the distinction between participation and privilege design.
Application users
Review and stage role assignments and team memberships for application users and service identities.
Definition artifacts
Import DVQR .dvim.json artifacts, plus CSV or JSON participation definitions, for repeatable, reviewable reconstruction workflows.
Validation and platform awareness
DVIM validates participation definitions before preview and apply. Validation surfaces missing identifiers, unsupported participation combinations, managed application-user warnings, access-team role assignment restrictions, import diagnostics, duplicate rows, and merged definitions. DVIM does not bypass Dataverse platform protections; platform restrictions are surfaced during execution reporting.
Preview-first boundary
DV Identity Manager is intentionally a participation manager, not a security analysis tool. It does not create roles, edit role privileges, display privilege matrices, calculate effective permissions, simulate RBAC, move business units, manage business unit hierarchy, perform security diagnostics, or recommend access changes.
DVQR reconstruction artifacts
DV Quick Run v0.13.3 can export supported Identity Participation Drift findings as DVIM reconstruction artifacts. Those artifacts represent source-side participation reconstruction intent, not proof that access has been repaired or that the source is automatically correct.
Shared workspace behaviour
When a DV ForgeLab workspace is available, DVQR writes DVIM handoff artifacts under .dvforgelab/dvim/exports. DVIM can import those artifacts, validate supported role and team participation definitions, preview the exact changes, and apply only after explicit user action.
Relationship to DV Quick Run
DV Quick Run remains responsible for investigation, comparison, timeline reconstruction, audit context, reports, and artifact preparation. DV Identity Manager remains responsible for preview-first identity participation reconstruction. Context may travel between tools; authority does not.