Custom security role creation

(0) Share

Report

Posted on by Community Member

Hi experts

I have to create same role like SystemAdmin role only except HR roles.

Can you please help me how I would create.

or can you please share me x++ job to create sub-role using x++ (If I create custom role and assign sub-role; there are 100+ role available; adding manually a challenge)

*This post is locked for comments

I have the same question (0)

All responses (5)

Answers (0)

Suggested answer

nmaenpaa 101,160 Moderator on at

Like (0)

Report

SysAdmin has access to everything. There's no easy way to create "like adnin, except foo" roles. But you can start by adding all roles except HR related roles to your new role.

I'd say it's quicker to drag&drop the 100 subroles than develop code that does it. Assuming you need anyway to tell your code which subroles you need.

You can select multiple roles in AOT if you hold down shift or ctrl. Then drag them to your role. So it should take you 10-15 min.

Was this reply helpful? Yes No
Suggested answer

Satish Panwar 14,671 Moderator on at

Like (0)

Report

Hi Beginner,

Create a new custom role, then assign all roles underneath it as sub-roles except HR roles. All sub-roles permission will roll onto the custom new role you have created. The link below mention little bit about it, but you need to do on your own.

docs.microsoft.com/.../create-or-modify-a-security-role

Thanks,

Satish Panwar

Please take time to click 'Yes' against the answers that help you guide in right direction to help other community members.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Thanks Satish, Nikolaos Mäenpää

Ok, let us assume I have added all role by drag and drop.

One more thing I want to confirm - AOT access will automatically comes or will need to do any other extra effort?

Please suggest.

Was this reply helpful? Yes No
Suggested answer

nmaenpaa 101,160 Moderator on at

Like (0)

Report

Only System Administrator role has AOT access. You can't create roles that would have AOT access. If you think about it, it's quite obvious, right? Otherwise the user could add the missing HR roles to their role in AOT.

What is your business requirement? You should not and can't let others than administrators in AOT.

Was this reply helpful? Yes No
Suggested answer

Satish Panwar 14,671 Moderator on at

Like (0)

Report

You may not have it, you can test it as part of your role creation, shouldn't take long to verify. Similar thread was discussed long back and it seems like for accessing AOT, you need to have 'System Admin' role but you can give it a try.

community.dynamics.com/.../how-to-set-a-user-in-ax-2012-to-access-aot

Thanks,

Satish Panwar

Please take time to click 'Yes' against the answers that help you guide in right direction to help other community members.

Was this reply helpful? Yes No