Personalized Community is here!
Quickly customize your community to find the content you seek.
Latest TechTalk Videos
Have questions on moving to the cloud? Visit the Dynamics 365 Migration Community today! Microsoft’s extensive network of Dynamics AX and Dynamics CRM experts can help.
2022 Release Wave 1 PlanDynamics 365 release plan for the 2022 release wave 1 describes all new features releasing from April 2022 through September 2022.
2022 release wave 1 plan
The FastTrack program is designed to help you accelerate your Dynamics 365 deployment with confidence.
FastTrack Community | FastTrack Program | Finance and Operations TechTalks | Customer Engagement TechTalks | Upcoming TechTalks | All TechTalks
Quite some questions I see on the Dynamics community forums and from people who reach out to me is about secure global address book in Microsoft Dynamics 365 Finance and Operations. Unfortunately, this is a feature which has not yet been moved by Microsoft from Dynamics AX 2012 to Dynamics 365. In this post, I will answer some of the questions you might have and provide a workaround to enable the feature today.
This first question you might have is: “What is the global address book feature?”
This feature was introduced in Microsoft Dynamics AX to provide record based security within the application related to parties as customers, vendors, employees and contacts. There were various options to tag the parties with address books and setup which teams were allowed to view which address book tag. So, if you were a member of one or more teams, you would see e.g. the customers related to that address book; others are not visible then. Also, there is an option to secure by legal entity, which means that in the global address book form and the names lookup on e.g. customers you will only see records which do have a role in all the legal entities you have access to. More information about this feature can be found in the Microsoft documentation: About security in the global address book.
In 2016, Microsoft released the cloud based version of Microsoft Dynamics 365 without this feature. From the beginning it was stated that it is a feature which got postponed. You can read it on the next page from Microsoft: AX 2012 features that were postponed – Finance & Operations. But why?
The development environment and the client experience got separated in Microsoft Dynamics 365. In the production environment, you don’t have access to the development environment. Enabling the secure options on the Global address book parameters form did change already exiting AOT objects. It did enable or disable security policies. These security policies were created based on the eXtensible Data Security (XDS) framework. Now there are two reasons why the AX 2012 approach is not possible today in Microsoft Dynamics 365.
Several times I reached out to Microsoft to ask about timelines. However the conversations are pleasant, as of today, there is no date to be announced. In version 7.3, some fixes were delivered to customers, based on overlayering. On LCS Issue search you can find Details for issue 3909290 (requires login). As of version 8.0, the overlayering was blocked and only deployment of extensions were allowed. For this reason, Microsoft is not shipping fixes anymore. To have it prioritized by Microsoft, you can vote for the Microsoft Idea · Re-instate securing the global address book by team as per 2012 (requires login).
I do notice that there is more and more demand for the security of the global address book. For this reason, I proposed an intermediate solution to Microsoft. Microsoft mentioned that this would not be something they could deliver as part of the standard. However, they support the idea when I provide a solution for the meantime.
For the time that Microsoft has no solution for moving the global address book security to Microsoft Dynamics 365, it would require a customization. I did create this customization myself and the good news is that I can share it with all of you on personal title. So, Microsoft and To-Increase are not the companies which would give support if something is unclear or not working. The download is available below.
I did some testing myself and it works the same way and on the same tables as were constrained in Dynamics AX 2012. If you want to use the security, there are some actions required.
It would be possible to change the Enabled property back to No in case you want to disable the security again.
The first version of this global address book security has only the constrained tables which were also set to constrained in Microsoft Dynamics AX 2012 R3. I have not reviewed which tables potentially needs to be included to support all standard functionality in Microsoft Dynamics 365 Finance and Operations. If you find a table, a developer can review which security policy to update with a new table. You can also add your custom tables as constrained table. As all objects are delivered in a model which is not restricted, you can change any detail of the solution.
Besides reviewing tables, you might also want to restrict data being read or updated via data entities. You can read my other blog about Extensible Data Security and data entities – Microsoft Dynamics 365 for Finance and Operations to learn how to add data entities as constrained table.
Finally, we landed at the section with the download option. Feel free to use it at any project where you need to use it. If you have feedback or questions, please use the Contact form or leave a comment below.
A bit more background how I created the solution, if you are interested…
For this solution, I copied all standard security policies related to the global address book security; including the queries and mycontruct tables. I will explain why.
When you compare the current standard security policies related to the global address book security with AX 2012, you will notice that the properties Constrained table, Constrained and Use Not Exist Join do have different values. The values from AX 2012 are correct and implemented in the download above.
I do hope you liked this post and will add value for you in your daily work as a professional. If you have related questions or feedback, don’t hesitate to use the Comment feature below. That’s all for now. Till next time!
The post About reinstating global address book security in Dynamics 365 Finance and Operations appeared first on Dynamicspedia.
Business Applications communities