Security in Ax 2012

(0) Share

Report

Posted on by Community Member

Hi All,

Is it possible to Create our own 'System Admin' user group where only development rights will be missing rest all access is present..

Till now I have understood that in ax 2012 System Admin access provided by Microsoft is nothing but just a security check condition where

If(User Access level == 'System admin')

{

"Check Nothing regarding access move further without interrupt"

}

else

{

"Check for permissions"

}

Please help, if anyone have any idea about this..

*This post is locked for comments

I have the same question (0)

All responses (8)

Answers (3)

Verified answer

Vilmos Kintera 46,149 on at

Like (0)

Report

Some features only work or could be set with a System administrator role only, which comes with AOT access that you cannot revoke. One solution is to connect your Production AOS instance to a Version Control System such as TFS, add all layers and models to the VCS repository, then do not grant access to specific accounts to check out/check in code. That way accidental modifications will be locked for them, however, they could still create new objects, or use table browser to check data, etc.

Others might suggest creating a new security role by copying all privileges, duties, roles into a single security object, but again, some features are still admin-bound that you will not be able to use properly.

Was this reply helpful? Yes No
Verified answer

André Arnaud de Cal... 301,194 Super User 2025 Season 2 on at

Like (0)

Report

Hi Shilpa,

In addition to the answer from Vilmos: Have a look at the next thread with some information where certain forms are also evaluating system admin rights to show certain features. They need some attention. community.dynamics.com/.../551319

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Hi Vilmos,

Thank you for reply.. I am using Version control but my problem is, I don't want to give User AOT access

And secondly I have tried that option of giving all priviledges, duties and roles into a single security object.. that makes my AOS very slow.. It took around half hour to load all security objects for first time..

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

.

Was this reply helpful? Yes No
André Arnaud de Cal... 301,194 Super User 2025 Season 2 on at

Like (0)

Report

Hi Shilpa,

The first time it should indeed cache the security objects for the user. It should be much quicker all further logins, unless you again changed something. If it remains slow, try to do some monitoring to see if hardware resources might be a bottleneck.

Do the users also get database connection errors when using standard GL roles?

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Hi,

Thank you for help.. Your Post give me great Idea which just solved my problem.

I have added all the privileges into one security object instead of roles.

Using privileges instead of role helped me solving different problems like :-

1. Less time consuming as repetition of same rights was not there.

2. All the newly created objects(Classes, forms etc.) were not ignored because there privileges were directly added to the role.

AX environment hardly took a minute to load after assigning this role.

Thank you for help again!!!

Was this reply helpful? Yes No
Vilmos Kintera 46,149 on at

Like (0)

Report

Please take your time to mark helpful answers next to each post with the checkbox, to resolve the thread.

Was this reply helpful? Yes No
Verified answer

Community Member on at

Like (0)

Report

My System admin duplicate role was created successfully. Thank you

Was this reply helpful? Yes No