web
You’re offline. This is a read only version of the page.
close
Skip to main content

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Microsoft Dynamics AX (Archived) / Using AD user groups i...
Microsoft Dynamics AX (Archived)

Using AD user groups in AX

(0) ShareShare
ReportReport
Posted on by janchen 650

Hi All,

I have a question about AD user groups.
I already heard about the ID's will be given to employees when we import an AD-user group to Ax2012 R2.

Is this also for AX2012 R3?

Further I want to know  if it is possible to use AD-groups in combination with import per user?

And what if i have a hierarchy of the organization, am I linking the AD user group to the hierarchy of the organization or do i need to link the hierarchy to user and the security role?

Regards.

*This post is locked for comments

I have the same question (0)
  • Suggested answer
    André Arnaud de Calavon Profile Picture
    André Arnaud de Cal... 303,730 Super User 2026 Season 1 on at

    Hi Jan,

    There is no relation between employees and use of AD user groups. Probably you mean that when you created the AD user group in AX, any new User which was not setup will get a generated user ID starting with a '$'? This also applies for AX 2012 R3.

    You can import the users manually and decide your own UserID. This also works in combination with the User group users. The user is recognized based on active directory information; not the User ID in AX.

    If you are using the AD groups, the rights are maintained on the AD group user in AX. So the user itself does not need to have the rights assigned.

    All roles and hierarchies setup on the user group will be applied to the member of this group. So you don't have to do the same on the user. If you want to grant additional roles in a specific user which is also a member of a user group this is possible. The cumulation of user roles on the user and the user group will determine what the user can do in AX.

  • Community Member Profile Picture
    Community Member on at

    Hi André Arnaud de Calavon I like your comments. My environment is AX 2012 R3 with CU8 – automatic AX user creation using AD group works OK. However, in some cases AX UID is contains funky characters start with "$" 7A50, $432D … etc. Most of the time however though AX UID is same as AD network alias.  Anybody idea - how I can stop creating funky AX UIDs and like to why it is assigning automatically UID with $ sign in it? Please see the example below and FYI: we are not creating AX users in AX manually at all. All creation are through Active Directory.

    Fynkee.png

  • André Arnaud de Calavon Profile Picture
    André Arnaud de Cal... 303,730 Super User 2026 Season 1 on at

    Hi Vavani,

    Unfortunately AX creates the user ID's starting with the "$" sign when you use AD groups and the user enters AX the first time without being created as user manually. You can only bypass this by creating a new user (no roles assigned) before he/she will start AX the first time. Otherwise it is possible to rename the UserInfo record from the table browser.

  • Thomas Vogt Poulsen Profile Picture
    Thomas Vogt Poulsen 345 on at

    Hi André

    Do you know if this is a kernel feature or something we can customize. I have a customer request to denied user creation, if they are not created in AX before the users login first time.

    I know this is a bit "up-side-down", but lets just say management have to little faith in the IT-department to make decisions on who get access, and Yes it sounds stupid but there is a reason.  

  • André Arnaud de Calavon Profile Picture
    André Arnaud de Cal... 303,730 Super User 2026 Season 1 on at

    Hi Thomas,

    Creating the users with the '$'prefix is a kernel method which cannot be changed by partners or customers. If you don't want to provide access to users if they did not login before, you could not use the AD group user.

    If you have special AD groups for AX 2012 access, then assigning a user to the group is in fact the authorization to use AX.

  • Javirrubio Profile Picture
    Javirrubio 965 on at

    Hi Andre,

    I'm assuming another option is to delete the user with the '$' and then re-import it manually?

  • André Arnaud de Calavon Profile Picture
    André Arnaud de Cal... 303,730 Super User 2026 Season 1 on at

    Hi Javier,

    It will be possible, but renaming will also change related records accordingly.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Introducing the 2026 Season 1 community Super Users

Congratulations to our 2026 Super Stars!

Meet the Microsoft Dynamics 365 Contact Center Champions

We are thrilled to have these Champions in our Community!

Congratulations to the March Top 10 Community Leaders

These are the community rock stars!

Leaderboard > 🔒一 Microsoft Dynamics AX (Archived)

#1
Joris dG Profile Picture

Joris dG 5

#2
Andrew Jones a1x Profile Picture

Andrew Jones a1x 2

#3
GL-01081504-0 Profile Picture

GL-01081504-0 1

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans