Restrict Or Hide Navigation Pane Items - Is This Possible?

(0) Share

Report

Posted on by Community Member

Is it possible to hide/restrict modules on the Navigation Pane like Sales, Purchasing, and Inventory for certain users by default? On my test user I have unchecked the box so they aren't visible, then removed permissions for that user to customize the navigation pane, but by default for a new user those items are still visible.

I have Limited user licensing available so I'm seeing if there is a way to restrict them to self-service type tasks.

GP 2015 / 2016

*This post is locked for comments

I have the same question (0)

All responses (10)

Answers (0)

kdraper on at

Like (2)

Report

The only method I know of is in SQL but it is not perfect. The issue is the records in this table are not created for the user until they first login. So what my users see upon first login and then subsequent are different. Most don't notice :)

In our environment I am setting the option of only displaying Project for all Web Client only users. You can add the USERID where clause for a single user to test. Once you are happy you can just create SQL job.

Now that GP is moving into the ESS world they do need to give us more control of navigation. Why an ESS user would want to see the default accounting user navigation I would not know. I still have found no way to manipulate the actual left pane navigation items however like Report lists and Customer Source links. Microsoft support is still working with me on that one. Hope they can figure it out. If for example you select the Project link then in the left navigation pane you will see several options for different types of reports one being SSRS reports. When a user that has no access to any SSRS reports clicks on the link it works hard to display a list and then gives an ugly error message.

Be careful with the scripts use at your own risk. Start with select statement using the where clauses to see results :)

--update t1

--set t1.Visible = 0

--from dynamics..SY07130 t1

--join DYNAMICS..SY01400 t2 on t2.userid = t1.userid

--where t2.wcuser = 1

--and t2.sqlloginid = ''

--and t1.cmdsequence <> 8

--and t1.Visible = 1

I have another script that removes everything except the Transactions pane on the Projects home page

--update SY07140

--set Visible = 0

--where userid = 'kldraper'

--and CmdParentCmdID = 304

--and CmdSequence > 1

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Thanks for reaching out as always Kerry. Wow, that's really disappointing to see no front end options. Thank you for your scripts and your time the past few weeks. I'll poke around and see if I can get things hidden similar to you. Between this and trying to limit a Limited User to just ESS type duties, this 2016 migration has really been a nightmare! Terrible how even after giving my limited user just the ESS_EMPLOYEE* security role, they still have enough permissions to run reports all over the place and view items they shouldn't be able to.

Was this reply helpful? Yes No
TamiCampbell 21 on at

Like (0)

Report

Hi CRMUser12. I'm implementing web client with GP 2016 and running into similar issues. I was wondering if Kerry's script fixed the issue of reports too. I'm finding the web client user has access to run a report of all payroll transactions along with several other reports they should not be able to stumble accross.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

I've been extremely grateful for Kerry's help but after two months of attempting various tweaks (security roles, looking at sql scripts like the above, etc) I am considering third party providers such as Greenshades. The sheer lack of documentation of many of this frustrating items makes it clear this is very much still a work in progress at Microsoft. Going from something that was difficult to setup but did work (Business Portal) to this is mind boggling.

Sorry, I'm sure that's probably not what you're wanting to hear!

Was this reply helpful? Yes No
kdraper on at

Like (0)

Report

Yeah it has been incredibly frustrating and I have burned 5 support incidents with Microsoft and numerous hours of consulting with many consulting firms. I have now concluded without significant dexterity customizations we are not upgrading. The one company that has been excellent assisting with the process has been RSM. I am currently in the middle of a design project with them to address shortcomings with the PTE Timesheet Entry process and various navigation challenges with the web client you guys have been chatting about that can only be addressed with custom dexterity code. Microsoft has recognized a couple bugs that they say will be addressed in the future. The only issue thus far I think unsolvable is the lack of a refresh on the home page. Because the the page panes like Project Time and Expense do not refresh automatically when a user enters a timesheet in the system and closes the timesheet entry window the record they just submitted does not show up until they logout and back in or navigate to a different page and return. Keep in mind these are ESS users so what page would you expect them to navigate to. Because of this and only this I am leaving the project page accessible which is totally unnecessary. I can only imagine with 700 + users how many duplicate timesheets we are going to be dealing with. The fact the classic client has a refresh and not the web client makes no sense to me. The project timesheet entry process in Business Portal was far more user friendly which I could have never guessed I would be saying. In my opinion it is literally unusable in its native form. If the user does not navigate through the window in a very specific and awkward manner it locks up completely the browser must be shutdown without proper logout. There is no session management except to have an admin like myself delete inactive sessions manually, I can't believe they think that is at all practical. We are also developing another dexterity customization to deal with that.

And don't get me started on Organizational Accounts, wow I have no idea what the thinking was. When you enable the feature it literally disables the new workflow engine completely. What is the point of releasing that I have no idea. We may be unique but because of security concerns we require external users to use 2-factor which is awesome in Azure AD (Organizational Accounts) but because you can't use with workflow we had to implement this very clunky hybrid method where the user will first use Azure AD 2-factor to access the web client login page and then use their Windows account to authenticate to GP. Very strange and embarrassing to be honest.

I could keep going on for another couple pages :(

As soon as I reach a final solution on these numerous items I plan to write a post or two on the GPUG site to not vent but at least give an opinion and offer some alternatives until Microsoft can get these things cleaned up.

Keep in mind I have been working with GP since the days of GP DOS, yeah i'm old :) 25 years roughly and I love the product and people but this is the craziest thing I have seen in a long time.

I am trying to not get discouraged and I would encourage the same. I am confident Microsoft will get on top of this.

http://rsmus.com/

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Thank you for the well thought out post Kerry, appreciate your time on items like this! Wish there was a Uservoice type site for GP where we could get people to rally around issues like this to get MS to notice. If you're ever working with Microsoft and need additional people to chime and say "yes this affected me too" or "you lost me as a customer for the terrible self service+web client piece", please reach out and let me know, I'd be happy to help.

Was this reply helpful? Yes No
Don Schaefer on at

Like (0)

Report

Is there any more news on this topic? We are currently testing GP 2016 R2, but the fact that users see all the restricted menu items, even though they can't open them, is a troubling thing that is preventing our migration plans.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Nope. Was tired of trying to fight GP for functionality that Microsoft removed so I switched to Greenshades so employees could view their paystubs.

Was this reply helpful? Yes No
Don Schaefer on at

Like (0)

Report

Does Greenshades hide the HR/Payroll navigation pane menu for users that should not have access to it?

Of course if Greenshades is not a GP plug-in, then I know it won't do what I am wanting done. Thanks,

Was this reply helpful? Yes No
Suggested answer

Chris.Hadden 726 on at

Like (0)

Report

The Greenshades employee portal is hosted outside of GP. There are some screenshots and videos at http://www.greenshades.com/solutions-employee-services.php

So instead of setting up and employee as a self-service user in GP, Greenshades just creates an employee account based on the data coming from the employee maintenance card in GP.

The thread is a bit long so I am not sure what you are looking to solve for exactly, but the answer to your question is 'yes', in that the employee would not see GP at all.

Greenshades connects to GP using a Go Sync Connector (info page here http://www.greenshades.com/download-greenshades-online-connector.php).

If you need more info let me know and I can ask an account manager to give you or a call. I am happy to chat with you as well to address any questions you may have.

Hope this helps!

Was this reply helpful? Yes No