Microsoft Dynamics GP (Archived)

User Creation in GP2011

(0) Share

Report

Posted on by Karen Navas

155

Is sa the only user that can create a new user in GP2011?

*This post is locked for comments

I have the same question (0)

All responses (5)

Answers (0)

Suggested answer

twelvestrikes 3,657 on at

Like (0)

Report

RE: User Creation in GP2011

Hi Karen

The DYNSA account is also available and that account should be able to create new users.

By the way there is no GP2011.

There is GP2010, 2013, 2015, 2016, 2018 plus previous versions

Was this reply helpful? Yes No
Richard Wheeler 75,848 Moderator on at

Like (0)

Report

RE: User Creation in GP2011

DYNSA is created for those companies that do not want to give out the 'sa' password. It is created when GP is installed. Does anyone there know the DYNSA password?

Was this reply helpful? Yes No
Suggested answer

KirkLivermont 5,985 on at

Like (1)

Report

RE: User Creation in GP2011

Any user can be used to create users but it takes a few extra steps when configuring the account that will be used to create other accounts.

https://www.gofastpath.com/blog/add-gp-users-without-sa

I think there is another whitepaper out their that explains a more granular way to grant the permissions. I believe the user need the SQL access admin and SQL security admin rights assigned.

Kirk

Was this reply helpful? Yes No
Derek Albaugh on at

Like (1)

Report

RE: User Creation in GP2011

Hello Karen,

If you look at the SecurityPlanning.pdf file that is in the Dynamics GP Documents folder, in chapter 7 it goes over 'Core application security tasks', one of these is Creating User Records.

When creating user records in Dynamics GP, you have to remember that when a user is created in Dynamics GP, you're also creating a login on the SQL side and that is why, by default, only sa and DYNSA are able to do this process, because they are the only GP logins that also have security permissions on the SQL side, sa being the sysadmin and DYNSA being assigned dbcreator and securityadmin roles in SQL.

As mentioned in this PDF file, the options needed to be able to create a new user in Dynamics GP are:

1) Login to Dynamics GP as 'sa'

2) Login to Dynamics GP as 'DYNSA'

3) Assign a GP login the 'sysadmin' SQL role along with the DYNGRP database role under the DYNAMICS/system database for GP.

4) Assign a GP login the 'SecurityAdmin' SQL role as well as the DB_Owner database role under the DYNAMICS system database.

5) Assign a GP login the 'SecurityAdmin' SQL role along with both the 'DB_AccessAdmin' and 'DB_SecurityAdmin' database roles under the DYNAMICS/system database for Dynamics GP.

Obviously, when giving GP logins roles and permissions on the SQL side, you need to be aware that not only are they able to create a user in Dynamics GP, they may also now have additional permissions on the SQL side, especially if assigned the 'sysadmin' SQL role, which gives a user ALL permissions on the SQL side, so be cautious of what permissions are given to users.

More information such as this is in the PDF file I mentioned.

Thank you,

Was this reply helpful? Yes No
Karen Navas 155 on at

Like (0)

Report

RE: User Creation in GP2011

Thanks for the replies. I did actually mean GP 2013 not GP 2011 (typo). :) I created a new user in GP and assigned the proper roles in SQL. Apparently our Corporate office even though they didn't want to give out the 'sa' password was ok with this as a solution. (??)

Was this reply helpful? Yes No