Announcements
I have assigned a role to the user through super user. But user can change its role by going to settings.
I do not want the user to change the role assigned to him by super user. Is there is a way in business central to stop it.
Thanks
Update:
I was able to validate that excluding the roles page prevents user from accessing the roles list in My Settings. This worked when using a simplified permission set and removing all other permission sets from the user.
The problem is if a user has 50 permission sets (via user group perm sets) then it becomes an exercise in excluding the roles page in each and every permission set. Is there a method for doing something like this other than combining the 50 permission sets into 1 giant one and then using the exclude?
that's a good point. The client does not want users to change their role but it's worth pointing this out to them in case that's the reason they want to lock the role.
Just also remember that even though they can change their role, that does not change their permissions.
So permissions will be the same even if a role is changed.
User can still change role. These are effective permissions:
Object Type Object Name Execute Permission In User-Defined Permission Set
Page User Settings Yes Yes
Page Roles Yes Yes
Permission Set Source Type Execute Permission
D365 BUS PREM X Normal User-Defined Yes
LOGIN Normal System Yes
Entitlement System Yes
Hi, Microsoft has created a new My Settings page in the latest version. Of course, the ID has also changed. You can check it in Page Inspection.
The processing method is the same.
Hope this helps.
Thanks.
ZHU
Hi ZHU, I copied the D365 BUS PREMIUM permission set and then excluded pages 9172, 9178 but the user is still able to change their role. Can you please confirm it should work? Thank you.
Interesting news, I will understand this topic before it's too late. I need to find out as much information about this as possible for me, as well as for my business as a whole. The main thing is that it would not affect credit accounts in any way. Recently read information about personal loan to pay off credit card, I used fitmymoney.com/.../ for this. For me, this is also important information. Since after the opening of the business, I had debts for money. This issue needs to be sorted out. I will most likely use this method. This is a good option for me.
Cheers Mr.
You are correct that you can't stop a USER from amending it but you can stop the Role from being able to change it.
For instance if you want every user with the Test234 Role from being able to change their Role in My Settings you will need to configure that Role and then remove the Role field from the My Settings page.
To do this search for Profiles
Click on the Assist Edit (3 little dots) of the Profile you want to change and click on Customise Pages. This will open up a new tab for you to make your changes.
Go to My Settings in that tab and click on the red arrow in the role field and select Hide
Then click on the red Done button to complete your customisation.
I would suggest also going to the User Personalisation Card and hiding the Profile ID field from that card.
I hope that makes sense.
André Arnaud de Cal... 291,359 Super User 2024 Season 2
Martin Dráb 230,370 Most Valuable Professional
nmaenpaa 101,156