Hello, Is there a way to export security roles assigned to users in AX - either excel or SSRS?
we can export the user's list but not the security roles assigned to each user info
user A - role1, role2 etc.,
user B - role2, role 3...
or what are the tables associated to users and their security roles?
appreciate your help
The table name with this information is: SecurityUserRole
You can find it in the AOT, System documentation, Tables
Note that the company assingments are stored in the table SecurityUserRoleCondition.
Hi Andre, thanks. i looked at the security role table that contain the security role ID but couldn't find the table that store the name of the security role.
Hi Andre thanks. I found it. in fact the SecurityRole has the description that I can join with SecurityUserRole.
If you create a query with these tables as datasources and add it in the form "Document data sources" (Organization administration, setup, document management) it is possible to use it in Excel as well with the Office add-in.
If you are running AX 2012 R2 or planning to upgrade to R2, this information is available in the standard SSRS report.
Wonder why MS didnt provide the same report for AX 2012 RTM.
Can you please explain how to access this SSRS report?
Please see the following blog entry for migrating security information in AX 2012
[System Administration > Reports > Licensing > Named User License Counts]
I hope you have the scheduled batch job for calculating license counts running. To check it, look for the job [Named user license count reports processing] in [System Administration > Inquiries > Batch Jobs]
i'm not sure on the report. But this query can return the user name, role and the permission they have in each company.
while select ID from userInfo
order by id asc
outer join UserRole
where UserRole.User == userInfo.Id
outer join securityRole
where securityRole.RecId == UserRole.SecurityRole
outer join roleOrganization
where roleOrganization.User == userInfo.Id
&& roleOrganization.SecurityRole == UserRole.SecurityRole
outer join internalOrganization
where internalOrganization.RecId == roleOrganization.OMInternalOrganization
print userInfo.Id, userInfo.Email, SysLabel::labelId2String(securityRole.Name), internalOrganization.Name ? internalOrganization.Name : "All Company";
Question regarding the data...
So I'm in the SQL SECURITYUSERROLE table and the SECURITYROLE column for my userID has the following values...
I then go over to the SECURITYROLE table (I think it's a view though) and can't find any of these role values. I'm obviously missing another table somewhere. Can someone please enlighten me? Thanks in advance.
You can find the security role table within the system documentation section of the AOT as well. I have checked the first RoleId from your list. Filtering on the record id of this table has a result: Role Employee.
Is it possible to create a binary def group and use the import / export framework to import the data from SecurityUserRole table if the userInfo is the same in each system?
I am creating a UAT environment and I want to transfer the user role assignments already setup in the first environment.