Dear GP community,
I want to restrict an access of two GP users to change / create Vendor master cards due to segregation of duties requirements.
What is the proper way to complete this task?
Thanks
Larisa Kryukova
*This post is locked for comments
Larisa,
As I mentioned to you, you may need to duplicate the security roles and task for the users in question, before you attempt to make any changes.
To duplicate a security role, go to Administration > Setup > System > Security Roles. You will then select the current security role assigned to the users and click the copy button, then enter the new security role you would like to create for them.
Once you duplicate the security role, go to Administration > Setup > System > Security Tasks. You will then select the security task currently assigned to the user and click Copy to duplicate the task, in this case, CARD_0301*. You can now select the duplicated security task and remove access to the Vendor Maintenance security operation.
You will then go back to the security role and unmark the CARD_0301* security task and mark the newly created security task. This should take care of business.
PS. My wife is from Moscow, so I can pretty much identify any Russian name :-), nothing to do with your English by the way.
Hi Mairano,
I cannot use this option as it affects other company users.
how could I create new role?
I would create new role and copy only tasks I need.
Thanks
Larisa
How do you know I'm Russian?
If my English is so bad :(
I did as per instructed works fine
Zdrahstvooytyeh Larisa,
In order to restrict access to the Vendor card and if using the standard Microsoft Dynamics GP security tasks and roles, you will need to remove access to the CARD_0301* security task, under the following security roles: ACCOUNTING MANAGER*, AP CLERK*, BOOKKEEPER*, OPERATIONS MANAGER*, PURCHASING AGENT*, and PURCHASING MANAGER*.
To do this, open the Security Roles window (Administration > Setup > System > Security Roles) and locate the security role the user belongs to. You will then want to uncheck the CARD_0301* security task. To find the security role the user belongs to, go to the User Security window (Administration > Setup > System > User Security) and select the user ID in question. You will see the assigned security roles.
You may find that in order to make this change, you may need to duplicate the security task or the entire security role to achieve it. This is the downside of the out-of-the-box security model. You may want to consider acquiring the GP Power Tools from Winthrop Development Consultants (www.winthropdc.com) as it has a feature called Deny Base Security, which allows you to take away specific access to specific objects without having to duplicate security roles and tasks.
Stay up to date on forum activity by subscribing. You can also customize your in-app and email Notification settings across all subscriptions.
#1
André Arnaud de Cal...
291,280
Super User 2024 Season 2
#2
Martin Dráb
230,214
Most Valuable Professional
#3
nmaenpaa
101,156
Share
Report
All responses (
Answers (