Skip to main content

Notifications

Microsoft Dynamics GP (Archived)

Who Has More Information About Directory Accounts (logins)

Posted on by Microsoft Employee

I'm currently testing GP 2013R2 --> 2016 and almost done but getting hung up in one area; business portal. Business Portal was deprecated in 2013 so all I wanted to check out was if a self-service user was an option/replacement for my organization. I have the web client somewhat setup and want to test a user logging in there https://servername.domain.com/GP and the client just logging in (web client only user). Unfortunately I just don't really see much on web client only users in the Microsoft GP 2015 installation/upgrade instructions.

*This post is locked for comments

  • kdraper Profile Picture
    kdraper on at
    RE: Who Has More Information About Directory Accounts (logins)

    No sorry we are not rolling out W4's at this time so have not worked with it yet.  You are correct however ESS users should be able to edit and submit changes through the workflow engine.

  • Community Member Profile Picture
    Community Member Microsoft Employee on at
    RE: Who Has More Information About Directory Accounts (logins)

    Kerry did you ever have any issues editing data (w-4s, personal info like address/phone #/etc, or direct deposit) that ESS Employee role users can view? My test users can see those items but can't edit (at least my research makes it seem like they should be able to).

    community.dynamics.com/.../561123

  • Community Member Profile Picture
    Community Member Microsoft Employee on at
    RE: Who Has More Information About Directory Accounts (logins)

    Yep, sorry blew right past that during the web client setup. Sounds easy enough, hoping to get this tested first thing on Monday morning. Thanks for this, really appreciate it.

  • Verified answer
    kdraper Profile Picture
    kdraper on at
    RE: Who Has More Information About Directory Accounts (logins)

    HI,

    During the installation of the web client it will prompt you to enter the security groups.  For me I use Domain Users for the web client because all our users need ESS access and a GPAdmin group for the web management console.  Self Service licences are not required for testing or production for that matter.  I have Limited for all my ESS users.    When you setup the user just select User Type of Limited, Home Page Role of Self Service and finally after giving company access assign one of the predefined Security Roles like "ESS EMPLOYEE*".

  • Community Member Profile Picture
    Community Member Microsoft Employee on at
    RE: Who Has More Information About Directory Accounts (logins)

    Kerry, so good to hear from you! Doubt you remember me but you've assisted me in the past so just wanted to say a quick thanks first. I swear when doing researching on this topic I've always ended up in a forum post of yours like this one, ha ha ha. Can't believe there aren't more people talking about this. For example, a question I keep coming back to is the security groups for the web client. Page 27 of the How-to-install-Microsoft-Dynamics-GP-2015-Web-Client.pdf mentions security groups for the web client but in a very brief generic way. Basically my group breakdown would be GP admin/daily users (four people) and then everybody else in the lowest tier group possible for ESS functions. So I get that part, just create two AD security groups, but beyond that, where am I adding them? As I'm typing this up, I realize would that be done in the Web Services Management Tools area?

    This next part is a little wacky so feel free to tell me to get lost on this part - I actually don't have any ESS licensing at the moment to test with unfortunately. The Accounting department handles licensing at my organization, and at some point years ago got 30 "Limited" concurrent user licenses grandfathered into the licensing plan (completely unused right now). I know having an ESS role/licensing would simplify things, but I was hoping I could create a custom security role for a Limited user to basically create my own ESS user or possibly even more minimally, just to view paystubs. Have you seen any resources that compare a Limited security role with an ESS security role in a typical comparison table format? Verifying with my vendor who provides my GP licensing if this is possible, but thought I'd ask you as well.

  • kdraper Profile Picture
    kdraper on at
    RE: Who Has More Information About Directory Accounts (logins)

    We are doing the same thing.  You are headed down the correct path, Web Client Only with the proper Security and Home Page Roles will replace the Business Portal.  Web Client Only just means they cant use the classic client (no SQL Login).  I would recommend you create yourself a separate GP User for testing assigned to Self Service Home Page Role, marked as Web Client Only and linked to your Domain account.  Then when you login you will see what it will look like for others.  Remember the standard GP security applies and there are a couple Security Roles you will notice that are new for ESS you can try.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

December Spotlight Star - Muhammad Affan

Congratulations to a top community star!

Top 10 leaders for November!

Congratulations to our November super stars!

Community AMA December 12th

Join us as we continue to demystify the Dynamics 365 Contact Center

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,240 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,149 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans