web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

Community site session details

Community site session details

Session Id :
Finance | Project Operations, Human Resources, ...
Answered

Restrict Asset state with role

(0) ShareShare
ReportReport
Posted on by 12

Hi team,

I have a requirement where updating Asset state should be restricted with the role. Like in below snap the state 'Working' will be allowed to update only by user A and user B should be restricted to update 'Working' state and able to update only the state 'Training' . This state field is a string type and we have lot of states. so could you assist if we can able to achieve this through user level role restriction or we need find other way?

pastedimage1668008679187v1.png 

pastedimage1668008832027v2.png_2D00_640x480.png

I have the same question (0)
  • Suggested answer
    André Arnaud de Calavon Profile Picture
    301,020 Super User 2025 Season 2 on at

    Hi Vignesh,

    There is no setting in the application to configure this out of the box. You can achieve this with a customization. E.g. extensible data security (XDS) is an option to restrict the available states for users in the list.

  • VV-22040800-0 Profile Picture
    12 on at

    Thanks Andre for your response.

    Could you share any documentation to implement this?

    Also could you provide some input on how to have this XDS implemented for the requirement I stated? can we able to restrict certain states to certain users or user roles?

  • Suggested answer
    André Arnaud de Calavon Profile Picture
    301,020 Super User 2025 Season 2 on at

    Hi Vignesh,

    I wrote several blogs about XDS: https;//dynamicspedia.com/tag/xds. For more understanding, you can read the blog with some examples. Extensible Data Security examples for Microsoft Dynamics (dynamicspedia.com)

    To get started with your scenario, you first need the definition about which users will have what states available. Is this dependent on a security role, a department, something else? If there is no option to link something, you might need a new setup table and form.

    Then it would be possible to define a query for the security policy and the policy which will constrain the tables.

  • VV-22040800-0 Profile Picture
    12 on at

    Hi Andre,

    Excuse for late response.

    With security policy, query and new role i can able to implement record level restriction but I'm facing one issue, with reference to my initial post the particular state value defined in query is getting restricted in 'update asset state' table but it also restricting/showing empty for the state value in asset grid list/table.

    we need to restrict only in update asset table and users should be able to see all state records in list page, could you guide how to achieve this? i haven't defined any constrained tables apart from the primary asset state table

  • André Arnaud de Calavon Profile Picture
    301,020 Super User 2025 Season 2 on at

    Hi Vignesh,

    Can share some screenshots to illustrate the current behavior and tell more technical details how you did setup the XDS policy?

  • VV-22040800-0 Profile Picture
    12 on at

    Hi Andre,

    I created the security policy and query like below and then assigned the relevant role to user, the particular state is not showing in 'state' table which is fine but it also showing the state value as empty in grid level which is not intended 

    pastedimage1672827809220v2.png

    pastedimage1672828570997v3.png

    Particular state is restricted here which is expected

    pastedimage1672829214030v4.png

    but the same state is showing empty in asset table grid page which needs to be made visible

    pastedimage1672829386875v5.png

  • VV-22040800-0 Profile Picture
    12 on at

    Hi Andre,

    Let me know if you have any idea on this?

  • André Arnaud de Calavon Profile Picture
    301,020 Super User 2025 Season 2 on at

    Hi Vignesh,

    On the form to update the asset status (EntAssetLifecycleStateUpdate), a temporary table (TmpLifecycleStateUpdate) is used to show the options to choose from. You can use this table in your policy instead of the current one you used now. This is just a suggestion as I'm not familiar with the data model for asset management.

  • VV-22040800-0 Profile Picture
    12 on at

    Hi Andre,

    It seems the table where i was trying to restrict the record is temporary table, so could you assist whether we can involve the tmp table in security policy? when i use the temp table in policy level i'm getting error, so kindly assist on this.

  • André Arnaud de Calavon Profile Picture
    301,020 Super User 2025 Season 2 on at

    Hi Vignesh,

    Are you able to share larger screenshots to illustrate the current scenario? I'm not able to determine which exact forms you used when you created the screenshots.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Leaderboard > Finance | Project Operations, Human Resources, AX, GP, SL

#1
Martin Dráb Profile Picture

Martin Dráb 646 Most Valuable Professional

#2
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 529 Super User 2025 Season 2

#3
Sohaib Cheema Profile Picture

Sohaib Cheema 285 User Group Leader

Last 30 days Overall leaderboard

Product updates

Dynamics 365 release plans