web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

Community site session details

Community site session details

Session Id :
Microsoft Dynamics AX (Archived)

List/dump of entry points

(0) ShareShare
ReportReport
Posted on by 6,609

Hello. I was curious if there's a published list or a method of retrieving from the system data about the entry points with their corresponding privilege, duty, and role relationships? We're looking to (finally) begin addressing security and I'm thinking with such a list I can easily cross reference my users' roles to the entry points. Ultimately this exercise is to help reduce our licensing cost but it will be invaluable to help us understand our users' access as it corresponds to their job duties.

Thank you very much.

*This post is locked for comments

I have the same question (0)
  • Suggested answer
    Community Member Profile Picture
    on at

    I suggest you should consider Security development tool for Dynamics AX 2012

    please follow following link for more details

    technet.microsoft.com/.../hh859728.aspx

    Please verify and update if you need more details.

  • bankk Profile Picture
    6,609 on at

    Hi Nitesh,

    I actually do have the SDT in one of my environments. It's been helpful to help understand what entry points a particular role has but I'm not sure there's a way to export that data in tabular format. I'm sorry I left this out of the original post but I need a way to tell what entry points are pushing particular users to an enterprise license, hence what it would take to bring them down to a functional license, for example. I have such a file but it was produced back in 2012 (for CU2 I believe) and I haven't been able to find an updated copy.

    Thanks for you input.

  • Community Member Profile Picture
    on at

    ok.. got it.. for this purpose may be you need to look for the provider of the document for updated version document.

    I am not having that..

    appreciated if you can share that, and then may be it will help us find out such document for updated version.

    if it is ok please send it to my email niteshranjan007@yahoo.com

  • bankk Profile Picture
    6,609 on at

    Hi Nitesh, I didn't get a response back from the original source. I will send you the copy I have but as expected it will be very dated. Thanks.

  • Suggested answer
    Martin Dráb Profile Picture
    237,965 Most Valuable Professional on at

    Microsoft Dynamics AX 2012 Menu Item Mapping was updated on 24/12/2013, so I wouldn't expect it to be too outdated. I didn't investigate that, though.

    I would also like to hear what you miss in the Security Development Tool. Don't choose any role and use Load additional metadata - the grid will show everything what you've asked for. Or am I wrong?

    You could also generate the list by yourself from AX metadata (through a simple script), but why if the Security Development Tool does it for you?

  • bankk Profile Picture
    6,609 on at

    Hi Martin, thank you for the reply.

    The menu item mapping excel link appears to be pointing to the same version I currently have, and I downloaded mine probably middle of 2013. I quickly checked the row count assuming since late 2011 there likely would have been new entry points added.

    To your comment about the SDT having everything in my request. I believe it does have all that I was looking for except not in consolidated form. Your comment did prompt a question though. I understand high-level that the entry point has a corresponding license level attached. However, could a restricted entry point access level (e.g., view) have a different license level versus that same entry point with a full control access level?

    Thanks in advance.

  • Martin Dráb Profile Picture
    237,965 Most Valuable Professional on at

    If you look at a menu item in AOT, you'll find two properties related to license level: ViewUserLicense and MaintainUserLicense. ViewUserLicense applies to users with view access only, MaintainUserLicense applies to people with higher permissions.

    About SDT, I thought you wanted to export that data in tabular format, so that's what I tried to answer. If you want a consolidated form, could you please describe it a little bit?

  • bankk Profile Picture
    6,609 on at

    I was looking for a spreadsheet with a comprehensive list of all AX entry points with their type, access level, and license level. What I was hoping to do with this data was cross-reference it against the entry point data I would take from the SDT to get an idea of which entry points were effectively requiring a user to need an enterprise license (versus functional). We have fringe cases where users have limited responsibilities so there may be the opportunity to step them down to a lower level license. As you mentioned, I've seen some of the entry point properties which appears to point me to that data I need but I do have to look them up one by one. If you have a script or other more efficient methods I'd appreciate some help.

    Now I'm unsure if a user's right to view versus maintain an entry point would then impact whether that entry point would require a functional versus enterprise license.

    Hope that better clarified my needs. Thanks very much for your time.

  • Verified answer
    Community Member Profile Picture
    on at

    KBanh, if you have the security dev tool installed you can do this, albeit a low-tech way.

    First of all, click on "Load Additional Metadata".  This will provide you the effective user license for the Menu Item and the user license type for the role.

    Select a role you want to assess.  Filter on the "User Access" column, "!No Access" to eliminate all menu items the role doesn't have access to.  You should also see the effective user license for the Menu Item within the grid.

    Use Control+T to export the grid to Excel.  You can see what specific menu item is causing the user to be enterprise vs. functional, and eliminate from there.

    Hope that helps.

    -Drew

  • Verified answer
    Martin Dráb Profile Picture
    237,965 Most Valuable Professional on at

    In addition, if you're looking for a script, start with something like this:

    SysSecRoleEntryPointsTmp m;
    SysUserLicenseMiner::BuildLicenseMetadataTable(m);
    
    while select m
    {
        info(strMft("%1 %2 (%3) - %4",
                    m.EntryPointType,
                    m.Name,
                    m.AccessType,
                    m.UserLicType));
    }

    Regarding: "Now I'm unsure if a user's right to view versus maintain an entry point would then impact whether that entry point would require a functional versus enterprise license." - Of course it will have impact, if you don't have the same license type in both. If a user has view access, he needs the license type defined in ViewUserLicense, if he has delete access, for example, he needs the license defined in MaintainUserLicense .

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Leaderboard > 🔒一 Microsoft Dynamics AX (Archived)

#1
Martin Dráb Profile Picture

Martin Dráb 4 Most Valuable Professional

#1
Priya_K Profile Picture

Priya_K 4

#3
MyDynamicsNAV Profile Picture

MyDynamicsNAV 2

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans