This also solved issues when you can’t create all table joins correctly due to missing or more than one table relations between the same tables. The second post about automatic role assignment, has an explanation how to create a custom query in the application development area to be able to reuse the same query again which makes it easier to setup the rules for automatic role assignment. Automatic role assignment in AX2012 – Part 2 One of the slides contains the query from user to the resource project setup. Below, you will find a slide deck of a recent presentation I did on the 365 Saturday in Brussels. The user is now linked to a resource instead of directly having a project setup on the worker. Unfortunately, the data model has been changed compared to Dynamics 365. In the first blog about automatic role assignment, I wrote about how to find the users in the system who are a project time sheet user. Automatic role assignment in AX2012 – Part 1 The only changes, you can find in the data model. In concept, there is no change in Dynamics 365. At that time, the blogs were written based on AX2012. A few use cases are mentioned in two blogs I wrote in the past. You can join other tables and filter ranges on the advanced query dialog. The rule is based on a query which start from the Users table. The automatic role assignment feature is a framework where you can create rules on each security role and assign the correct legal entities using organization assignments. There is an alternative solution in the security framework provided within Microsoft Dynamics 365 for Finance and Operations. How this works and a list of disadvantages can be found in my recent blog: How to use Azure Active directory for managing users and security in Dynamics 365 for Finance and Operations. However, there are some important drawbacks. Microsoft Dynamics 365 for Finance and Operations is capable of handling this scenario. Just create a user, assign license and a security group in Active directory. The direction of thinking in groups makes it easy, but how to implement this thought for assigning the permissions for the correct legal entity? (Azure) Active Directory groups is a viable solution. For example, you might think of the next example:īut also, per country multiple roles, like: Finding a role is quite easy, but assigning the correct legal entities would be a bit more difficult based on a location.Īn ideal scenario would be to have groups per location (country, group of companies). Now with the location and roles on the for, you would like to complete the task as quick as possible. On the form, next to a location, there is usually also a section which tells which roles should be assigned. Microsoft Office, Dynamics 365 for Sales, Dynamics 365 for Supply Chain Management. An administrator should then create an (Azure) Active Directory account and then also assign licenses for e.g. In many companies, there is a form which should be completed to request user accounts. You need to have attributes of the worker to know what should be assigned. With just a user ID or name, you can’t achieve it. In various implementations I have used the automatic role assignment to reduce the throughput time for setting up a worker with the correct access permissions. I have talked with larger organizations having over 2500 legal entities and more than 1500 system users how to minimize the effort on the IT department for assigning the correct roles. This all can lead to unwanted permissions for users, but maintaining the security role assignment in this way is also laborious. Some mistakes might be assigning a wrong role, but if you have multiple legal entities in your environment, you might also forget to assign the correct legal entities. In many cases, manually assignment is used where you can make a lot of mistakes. IntroductionĪutomatic role assignment is one of the features that is forgotten or overlooked during implementations. In this post, I will give a summary of former posts and how-to setup easy automatic role assignment. I love to share the knowledge I gained to help other people and organizations. You might know that the security administration is one of my favorite areas in Microsoft Dynamics 365 for Finance and Administration.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |