Skip to main content

Notifications

Announcements

No record found.

Microsoft Dynamics AX forum
Answered

How to prevent IT from seeing payroll

Posted on by Microsoft Employee

We are setting up AX now, and trying to integrate payroll, hr and financing.  However, it seems the UT administrative staff can therefore see our payroll if they really want to.  Any advice?  

  • Martin Dráb Profile Picture
    Martin Dráb 228,112 Most Valuable Professional on at
    RE: How to prevent IT from seeing payroll

    It depends on the definition of "system administrator". It's possible that the reseller means "System Administrator" role in Dynamics AX while I was referring to people working as system administrators.

    "System Administrator" role in Dynamics AX indeed grants a plenty of permissions in Dynamics AX. But a system administrator backing up AX database, for example, doesn't have to be assigned to "System Administrator" role in AX.

  • Community Member Profile Picture
    Community Member Microsoft Employee on at
    RE: How to prevent IT from seeing payroll

    From the reseller

    For considering the confidentiality of the payroll module, unless you don’t assign a role for system administration.  Otherwise it is almost impossible that the system administrator cannot see data stored in the database.  However, you can still choose to use the HR module but not payroll.

    Can you translate this?  i get what you are saying martin, but he is saying the administrator will be able to see everything...

    Thanks for the help

  • Verified answer
    Martin Dráb Profile Picture
    Martin Dráb 228,112 Most Valuable Professional on at
    RE: How to prevent IT from seeing payroll

    If you require somebody to have access to everything, then this person obviously can access the payroll data (because that's a subset of "everything").

    But:

    1. There doesn't have to be and shouldn't be a single person having access to everything. That's what segregation of duties it's all about.
    2. Nobody needs access to everything to perform any particular task, therefore you should ask what tasks "IT administrative staff" will perform and analyze what permissions they need for that.
  • Community Member Profile Picture
    Community Member Microsoft Employee on at
    RE: How to prevent IT from seeing payroll

    Ok, I understand.  They dont in fact have to have passwords to be administrators.  WEll then, who does hold the keys to the overall system?  

    sorry for the silly questions.

    my reseller told me that could be an issue, and i wanted clarification here.

  • Martin Dráb Profile Picture
    Martin Dráb 228,112 Most Valuable Professional on at
    RE: How to prevent IT from seeing payroll

    Yeah, administrators, but administrators of what? Do they really need to have the passwords (regardless of which passwords you mean)?

    If you accept that will have access to everything, then you just gave it up and the discussion is over.

  • Community Member Profile Picture
    Community Member Microsoft Employee on at
    RE: How to prevent IT from seeing payroll

    They are the administrators.  My AX partner said if they have the passwords, they can then access key data.  

  • Martin Dráb Profile Picture
    Martin Dráb 228,112 Most Valuable Professional on at
    RE: How to prevent IT from seeing payroll

    You didn't tell us what your "IT stuff" do. They don't need any access to data to maintain servers and perform database backups, for example.

  • Suggested answer
    Prashant Singh Profile Picture
    Prashant Singh 8,797 on at
    RE: How to prevent IT from seeing payroll

    Dear isaacrose,

    You need create separate role with the help of SDT (Security development toll). Which will allow you to make no access to payroll module to them. Otherwise if they have system admin rights they can see anything available in the system.So hide those forms or module completely. From those users.

    For your reference :

    www.youtube.com/watch

  • Community Member Profile Picture
    Community Member Microsoft Employee on at
    RE: How to prevent IT from seeing payroll

    IT adminisrative staff can therefore see our payroll if they really want to.  Any advice?  

Helpful resources

Quick Links

Dynamics 365 Community Update – Sep 9th

Welcome to the next edition of the Community Platform Update. This is a weekly…

Announcing Our 2024 Season 2 Super Users!

A new season of Super Users has arrived, and we are so grateful for the daily…

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 290,263 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 228,112 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,148

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans