Finance | Project Operations, Human Resources, ...

Cannot access window - even under POWERUSER

(0) Share

Report

Posted on by G_K

Hello,

Strange issue here. I have a user set up as a poweruser, but still cannot access the employee window in payroll.

I ran the grant.sql script, and no luck.

For another poweruser - everything works great. Not sure what the differences would be? I compared the security profiles in the application, and did not notice any differences.

Thanks for your help.

Categories:

Microsoft Dynamics GP

I have the same question (0)

All responses (3)

Answers (0)

Sort by

Suggested answer

Derek Albaugh Microsoft Employee on at

Like (0)

Report
Copy link

Link copied!

Is it the Employee Maintenance window (Cards > Payroll > Employee) that users/powerusers can't access?

I'd first verify that the Security option is marked in the Company Setup window (Administration > Setup > Company > Company), though having it not marked should make all users a PowerUser, meaning they have access to everything.

As a test, if you give a user the 'Payroll Clerk*' security role, can they access this Employee window, or not?

By default this role gives users access to that window, though PowerUsers don't actually use security roles and tasks.

My other question would be whether the user is a 'Full' user type, or set to be 'Limited' or 'Self Service' as that may make a difference?

Can the 'sa' login access this Employee window?

Thanks

Was this reply helpful? Yes No
G_K 48 on at

Like (0)

Report
Copy link

Link copied!

Hi Derek,

I'll answer your questions below (and thank you):

Is it the Employee Maintenance window (Cards > Payroll > Employee) that users/powerusers can't access? - Correct

I'd first verify that the Security option is marked in the Company Setup window (Administration > Setup > Company > Company), though having it not marked should make all users a PowerUser, meaning they have access to everything. - Correct, the security option is check boxed

As a test, if you give a user the 'Payroll Clerk*' security role, can they access this Employee window, or not? They cannot, even if they have that role.

By default this role gives users access to that window, though PowerUsers don't actually use security roles and tasks.

My other question would be whether the user is a 'Full' user type, or set to be 'Limited' or 'Self Service' as that may make a difference? They are a Full user(s)

Can the 'sa' login access this Employee window? - It can be accessed with SA, along with a user they set up a long time ago (this is their workaround).

Regards,

GKA

Was this reply helpful? Yes No
Suggested answer

Derek Albaugh Microsoft Employee on at

Like (1)

Report
Copy link

Link copied!

I'm wondering if you recently upgraded and/or never ran the security scripts that we have to run post upgrade of Dynamics GP?

For example, if I upgraded from GP 2016 to GP 18.4, after the upgrade was completed on the databases, I would need to run the scripts for any new security records such as in this blog:

community.dynamics.com/.../new-security-roles-and-tasks-missing-after-upgrading-to-microsoft-dynamics-gp-october-2021-release-18-4-xxxx

As these blogs mention, this is by design in that we would not roll down new security roles to an existing Microsoft Dynamics GP environment, which may cause issues with your current security design. Therefore, we have chosen to release these new security records as an INSERT script, even though we do not recommend making any modifications to our default security roles or security tasks, but instead create custom security roles and security tasks to use and make changes to.

Looking at the security records from this blog, I do see where a script is putting the 0/303/2 record into the SY10700 for the 'CARD_0501' security task, for the Employee Maintenance window. As well as another record assigning that task to the 'PAYROLL CLERK' security role, so the security records are present.

You can verify this by looking in the Security Task Setup window at the CARD_0501* task and under Microsoft Dynamics GP/Windows/Payroll, verify 'Employee Maintenance' is marked as it should be.

Running these scripts against the GP system database will give the same type of information:

Select * from SY10700 where SECRESTYPE = 2 and SECURITYID = 303

Select * from SY10600 where securitytaskid = 'CARD_0501*'

Thanks

Was this reply helpful? Yes No