Skip to main content

Notifications

Announcements

No record found.

Microsoft Dynamics AX forum
Suggested answer

Tracking code deployments from TFS/DevOps to Production for SOX purposes

Posted on by Microsoft Employee

We're an AX 2012 customer that does a fair amount of code customization and we recently became a publicly traded company so are in need of meeting SOX requirements.  We're walking through our Change Management (CM) control and are having a big issue meeting it because there is no direct link between code check-ins to DevOps and what gets pushed into Production.

Our code development process is the following:

1)  Developers make changes on their dev boxes and code changes are checked into DevOps.

2)  We run a period code-build process on a dedicated AX build server which pulls in all DevOps changes and final output is an AX modelstore file.

3)  Modelstore file is promoted to a Test AX environment where user validation occurs.

4)  Once all validation has occurred, the modelstore file will get promoted into Production.

The issue we're running into with our auditors is that there isn't any kind of hard connection between DevOps and final code promotion into AX.  Wondering what other SOX required companies have done to handle this?

Also, what have you done when needing to push a hotfix (XPO) into Production?

  • Martin Dráb Profile Picture
    Martin Dráb 225,610 Super User on at
    RE: Tracking code deployments from TFS/DevOps to Production for SOX purposes

    What kind of connection are you looking for? Would assinging a unique build number of the model satisfy your auditors?

    When somebody asks you tu push an .xpo to production, say "no". Kick of a build and deploy a model instead. If you want to use .xpo because you don't want to deploy all current changes, version control systems have a solution for you: branches.

  • Suggested answer
    RE: Tracking code deployments from TFS/DevOps to Production for SOX purposes

    Hi Swallman67,

    From the AX 2012 support perspective, I'm not aware of anything but hopefully someone in the community can assist.  One thought, is this more of a DevOps question vs AX?

    Ex. - https://devblogs.microsoft.com/buckh/using-branching-in-source-control-to-meet-sarbanes-oxley-requirements/ 

Helpful resources

Quick Links

Replay now available! Dynamics 365 Community Call (CRM Edition)

Catch up on the first D365 Community Call held on 7/10

Community Spotlight of the Month

Kudos to Saurav Dhyani!

Congratulations to the June Top 10 community leaders!

These stars go above and beyond . . .

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 287,995 Super User

#2
Martin Dráb Profile Picture

Martin Dráb 225,610 Super User

#3
nmaenpaa Profile Picture

nmaenpaa 101,148

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans