Restrict access to REASSIGN button on a specific workflow

(1) Share

Report

Posted on by KS-13051748-0

Hi,

One of our workflow is to approve new/update vendor banking information - Since these are sensitive data, we have been asked to remove access to REASSING button on this specific workflow

Is something that can be done through the workflow configuration or through security. Can you please explain how.

Thank you !

Kamel.

Categories:

Dynamics 365 Finance

I have the same question (0)

All responses (7)

Answers (0)

Sohaib Cheema 49,078 User Group Leader on at

Like (0)

Report

Restrict access to REASSIGN button on a specific workflow

Hi,

Every option (reassign, approve, etc.) has a corresponding action menu item. You need to remove access to the related action menu item by modifying or removing the security objects (privileges) that grant this access.

Is this a custom workflow or a standard workflow?

Was this reply helpful? Yes No
KS-13051748-0 99 on at

Like (0)

Report

Restrict access to REASSIGN button on a specific workflow

Hi Sohaib

This is a standard workflow, can you please elaborate more

Thank you !

Kamel

Was this reply helpful? Yes No
Sohaib Cheema 49,078 User Group Leader on at

Like (0)

Report
Restrict access to REASSIGN button on a specific workflow

Hi,

I have double checked it.

the Reassign in this case is happening for two main reasons.

1) the user who is supposed to approve/reject(take action) can use the re-assign, to delegate his/her work-item to someone else.

2) a system admin can see the reassign button, always for the fact that it can reassign an allocated work-item to anyone for administration reasons.

There is another aspect, which is delegate, and behaves the same as re-assign (however delegate and reassign are two different things, though produce the same output, so let's move to further details, as your question is not about delegate)

In the standard system, if a user has access to VendBankAccountsMaintain(a privilege), such a user will have access to all those option, as shown in the screenshot.

Reassign comes as part of System User Security role

Security Roles >> System User >> SysServerAXBasicMaintain(Security Duty) >> WorkflowEssentials(privilege) >> WorkflowReassignWorkItem(Action Menu Item)

The trouble is, if you take-off (remove access) of this action menu item, a user would not have reassign for any workflows (not just this workflow)

given the situation and facts, I see only two possibilities.

1) customization to disable the reassign for specific workflow(s) only.

Or

2) without customization, disable the reassign for all workflows

Was this reply helpful? Yes No
Sidick 152 on at

Like (0)

Report

Restrict access to REASSIGN button on a specific workflow

Hi,

If I'm not wrong, the Reassign button is visible only to admin users. Having said that the only possibility for a non admin user to reassign to another user is by using the delegate option in the different actions. So we can restrict this from the configuration. Does this make sense ?

BR

Was this reply helpful? Yes No
Sohaib Cheema 49,078 User Group Leader on at

Like (0)

Report

Restrict access to REASSIGN button on a specific workflow

Hi @Sidick

Reassign is also visible to the a person (who is supposed to approve/reject the work item) i.e. workflow approving person. It is provided as an option to such a user, so that he/she can reassign his/her work-item to someone else.

Although Delegate and Reassign do the same thing, but they are two different options.

Please read my previous response.

Was this reply helpful? Yes No
Suggested answer

Sidick 152 on at

Like (0)

Report

Restrict access to REASSIGN button on a specific workflow

Hi @Sohaib Cheema,

I've done a test with an Admin an non admin user. Here's what I came up with.

BR

Was this reply helpful? Yes No
Sohaib Cheema 49,078 User Group Leader on at

Like (0)

Report

Restrict access to REASSIGN button on a specific workflow

Hi @Sidick

non-admin user will see the work-item only when it gets assigned to the non-admin (for approval/rejection action).

If a work-item has nothing to do with a non-admin user, it will never go to non-admin user (therefore no re-assign option available as well)

Workflow configuration defines, to whom the work-item will go for approval.

Was this reply helpful? Yes No