Announcements
101 question here...
Starting to configure security for users in 365, and I'm having a hard time finding an answer to the question:
"Do I need to use/access the AOT at all?"
Meaning, is there a drawback to simply managing our enterprise security using only UI?
Many thanks,
Rich
Thanks HArshal, I'll look at the links
Thank Andre
Hello Rich,
I do not see a drawback in managing it from the UI as the navigation are user friendly however AOT would come in picture if you are using Extensible Data Security (XDS) policies.
other security docs as below for reference.
https://docs.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/sysadmin/role-based-security
https://docs.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/sysadmin/security-architecture
Regards,
Harshal
Hi Rich,
You can use the AOT, configuration via the UI or both. It would be up to you and your preference. When there a new form will be developed with a new menu item. probably you can better do it via the AOT directly as it will then also solve some BP checks where you would need to include menu items in a privilege.
Using the UI configuration, you can quicker test and move the security to other environments compared to the development approach which will require deployment downtime. Note that even with the configuration option, it would be recommended to first perform the changes in a non-production environment and move the security with file exchange instead of re-apply the same changes manually in the production environment.
The most security configuration can be done in both the AOT and UI. There are a few things which are not fully supported via the UI. What is e.g. not possible: Set form control overrides via the UI configuration if the control is part of an extension. This should be done via the AOT.
André Arnaud de Cal...
293,289
Super User 2025 Season 1
Martin Dráb
232,068
Most Valuable Professional
nmaenpaa
101,156
Moderator