Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network.