Skip to main content
Post a question

Notifications

Community site session details

Community site session details

Session Id : /jxfUvVUZ3bn31m9evxSqq
Finance | Project Operations, Human Resources, ...
Suggested answer

Do I NEED to use AOT to manage user security?

Like (0) ShareShare
ReportReport
Posted on 12 Mar 2021 20:03:05 by 145

101 question here...

Starting to configure security for users in 365, and I'm having a hard time finding an answer to the question:

"Do I need to use/access the AOT at all?"

Meaning, is there a drawback to simply managing our enterprise security using only UI?

Many thanks,

Rich

  • rgouette Profile Picture
    145 on 15 Mar 2021 at 12:34:47
    RE: Do I NEED to use AOT to manage user security?

    Thanks HArshal, I'll look at the links

  • rgouette Profile Picture
    145 on 15 Mar 2021 at 12:34:25
    RE: Do I NEED to use AOT to manage user security?

    Thank Andre

  • Harshal Nayak Profile Picture
    on 13 Mar 2021 at 17:47:59
    RE: Do I NEED to use AOT to manage user security?

    Hello Rich,

    I do not see a drawback in managing it from the UI as the navigation are user friendly however AOT would come in picture if you are using Extensible Data Security (XDS) policies.

    Reference: https://docs.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/sysadmin/extensible-data-security-policies 

    other security docs as below for reference.

    https://docs.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/sysadmin/role-based-security

    https://docs.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/sysadmin/security-architecture

    Regards,

    Harshal

  • Suggested answer
    André Arnaud de Calavon Profile Picture
    293,289 Super User 2025 Season 1 on 12 Mar 2021 at 22:33:38
    RE: Do I NEED to use AOT to manage user security?

    Hi Rich,

    You can use the AOT, configuration via the UI or both. It would be up to you and your preference. When there a new form will be developed with a new menu item. probably you can better do it via the AOT directly as it will then also solve some BP checks where you would need to include menu items in a privilege.

    Using the UI configuration, you can quicker test and move the security to other environments compared to the development approach which will require deployment downtime. Note that even with the configuration option, it would be recommended to first perform the changes in a non-production environment and move the security with file exchange instead of re-apply the same changes manually in the production environment.

    The most security configuration can be done in both the AOT and UI. There are a few things which are not fully supported via the UI. What is e.g. not possible: Set form control overrides via the UI configuration if the control is part of an extension. This should be done via the AOT.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

🌸 Community Spring Festival 2025 Challenge 🌸

WIN Power Platform Community Conference 2025 tickets!

Announcing Our 2025 Season 1 Super Users!

A new season of Super Users has arrived, and we are so grateful for the daily…

Kudos to the February Top 10 Community Stars!

Thanks for all your good work in the Community!

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 293,289 Super User 2025 Season 1

#2
Martin Dráb Profile Picture

Martin Dráb 232,068 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156 Moderator

Leaderboard

Product updates

Dynamics 365 release plans
Loading started