Share
Report
4I am working on permission sets that I will be applying via Security Groups.
I want to start with a blank canvas so no-one can access anything. Then record each separate function into a suit of Permission Sets and assign the relevant Sets to the relevant Security Groups.
I read about SYSTEM APP - BASIC allowing users to log on, but not have Role Centre access, so I created a Role Centre Set, granting access to our relevant Role Centres and "Including" SYSTEM APP - BASIC. All good so far...
My test user already has AUTOMATE - EXEC, EXCEL EXPORT ACTION, LOCAL and LOGIN rights and is a member of a Security Group that grants my created Role Centre Permission Set.
Now, I started to create a General Journal Posting Permission Set, through Recording. I made sure to go into the relevant drop down fields (GL Code, Cost Centre etc) so I accessed those tables. I even did preview posting before posting. I thought I'd covered all possibilities.
But when I tried to preview post a journal, using my test user, I had a permission error accessing Table Data 700 Error Message and 701 Error Message Register. I added each required permission until I got the error messages showing what was wrong with my journal.
Now, having done that, I have a Permission Set for General Journals that incudes the various Error Message access rights. However, each different Permission Set I create going forward will need to include those as well, so any user that does not have rights to post General Journals can still see error messages if they occur.
What I really need is a Permission Set to give me all of the "system" Tables/Table Data/Codeunits/Pages etc but no access to any "data". By "system", I mean login rights, error messages, Personalise etc. I can then grant all users access to that Set, knowing that any errors etc will be viewable by all.
I have gone through a lot of the System Permission Sets looking for one that would give me what I want. The closest I got was D365 BASIC, but this allowed viewing of Chart of Accounts, Items, Vendors etc which I would like to restrict.
Can anyone advise how this can be achieved?
Categories:
All responses (
Answers (
