Skip to main content

Notifications

Announcements

No record found.

Community site session details

Community site session details

Session Id :
Microsoft Dynamics NAV (Archived)

Permissions

(0) ShareShare
ReportReport
Posted on by 30

Perhaps someone can help resolve a friendly argument. In our company, User A was a designated Super User with unrestricted access. For reasons which aren't important here, that Super User status was removed and his access was restricted. We know he no longer had the ability to change permissions, roles, etc. 

This is the question. When the Super User status was withdrawn and User A no longer had the ability to make changes in permissions, did that also result in him no longer being able to view permissions generally? I'm guessing that it would because there would be no point in seeing who had what permissions if User A had no ability to change anything. But that's a guess. 

Any help will be greatly appreciated. Thank you in advance. 

*This post is locked for comments

  • Neville Foyn Profile Picture
    Neville Foyn 4,320 on at
    Re: Permissions

    On a side note this is a really good way to see who has super access in the system

  • Suggested answer
    Neville Foyn Profile Picture
    Neville Foyn 4,320 on at
    Re: Permissions

    &5543.Sec1.png"/resized-image.ashx/__size/550x0/__key/CommunityServer-Discussions-Components-Files/34/8713.Sec0.png" border="0" />

    These roles can be set to read or edit so even though the user does not have super he could still have permission to modify securities by having a different role that allows security

     

    Now to figure out what roles have access to these permissions:

     

    In the Classic (Designer) client click on Tools, Security, Roles

    Click the roles button at the bottom, then permissions (It doesn’t matter what role you are on when you do this)

    Show the "Role ID" column and then remove all filters from the button on the toolbar

     

    You are now looking at every permission in the system, and what role it belongs to (As well as if it has Edit or only View rights)

     

    Set a filter on the "Object Type" to only show System

    Set a filter on the first system permission that allows securities so "0"

    This now shows a list of all the roles that contain System 0

     

    Do the same for all the system ID's mention above and note what roles they link to

    Close the screens and start again from tools, security, Roles

    Click the Rile button and choose windows or database logons depending on what you use

    Show column "Login ID" and you now have a list of every user and what roles they have, you can compare this to the list of roles that allow securities and you sorted

    If you using windows logins you should also check if there is not possibly a database logon that the user has the password to and that has super access bypassing his login entirely

     

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Daivat Vartak – Community Spotlight

We are honored to recognize Daivat Vartak as our March 2025 Community…

Announcing Our 2025 Season 1 Super Users!

A new season of Super Users has arrived, and we are so grateful for the daily…

Kudos to the February Top 10 Community Stars!

Thanks for all your good work in the Community!

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 292,516 Super User 2025 Season 1

#2
Martin Dráb Profile Picture

Martin Dráb 231,409 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans