Security roles

(0) Share

Report

Posted on by Community Member

Hi,

I'm very new to AX but have an opportunity to create security roles for my company. We are not using the standards roles due to trying to limit access so the roles I'm creating are very specific to each person's job. I am trying to have a basic understanding of where to go when the workers' is access denied. For example, when the infolog "You are not authorized to access table ‘Default location’ (LogisticsLocationDefaultTmp)" pops up, where would I go to give access? I am not going into the AOT due to me being new in this position but I've been doing everything through security privileges > rich client. Is there a way to figure out exactly where to go depending on the error message (once again not in the AOT) through the Rich client and Service operations?

*This post is locked for comments

I have the same question (0)

All responses (9)

Answers (2)

Ludwig Reinhard Microsoft Employee on at

Like (1)

Report

Hi ChristinaH,

Maybe the following security development tool for AX2012 will help you.

Please take a look at the following site: community.dynamics.com/.../security-development-tool-ax-2012

Best regards,

Ludwig

Was this reply helpful? Yes No
André Arnaud de Cal... 301,156 Super User 2025 Season 2 on at

Like (1)

Report

Hi ChristinaH,

The security development tool can help you, but not directly with your issue. The access on tables is not supported by this tool. However, when you have this error, I assume you granted access to a report or an inquiry form? When you have created new privileges with menu item access, sometimes not all related objects are recognized. Usually when granting access to a form, it will also manage access to the table. E.g. reports, namely custom reports, lack in having correct permissions set on tables. In that case, the report or privilege should have permissions for a (temporary) table. If this is a standard report, the standard privilege would probably have a table permission set. You could copy then these settings to your own privilege. If it is a custom report, the permissions needs to be set by the developer on the report or the privilege.

It is also possible to set the table permissions on security role level. That is overwriting the access determined by reports and privileges. Note that the table permissions have to be set using the AOT; not the security development tool.

Was this reply helpful? Yes No
Mahmoud Hakim 17,887 on at

Like (0)

Report

Hi ChristinaH

security in AX 2012 is very complex.

maybe as Experts said security development tool for AX2012 will help you.

but you will face many problems when you implement security roles so you need a team leader or senior level to advise you,

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Thank you for all the replies. I will try the security development tool and see if it makes the roles easier to set up.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

The role I'm creating requires the worker to be able to go in a customer account and set the default location under addresses. I know this is really specific but our company is unique in the way that it does things and we are trying to limit access precisely to one's job. I was able to give the worker a view of the menu item but once selected, that error comes up. Trying to narrow down the permissions is very time consuming (though I'm not rushed due to the understanding of what this requires and my lack of experience) however, I presume there is a quicker more efficient way of understanding and executing these roles.

Was this reply helpful? Yes No
André Arnaud de Cal... 301,156 Super User 2025 Season 2 on at

Like (0)

Report

You are starting to provide some more details here. Can you tell the full requirements for this role on the customer details form? Is he allowed to edit customer details, or only being able to select a default location for a legal entity?

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Update: I was able to figure this one out (silly mistake on my part). However I was not able to find a link for the security development tool that worked for me. Thanks again for the assistance.

Was this reply helpful? Yes No
Verified answer

André Arnaud de Cal... 301,156 Super User 2025 Season 2 on at

Like (0)

Report

Hi Christina,

The link to the SDT is: lcs.dynamics.com/.../LocalTools

If the question has been answered, please mark the answer(s) that helped you. The thread will then get a status verified which also will help other persons with similar questions.

Was this reply helpful? Yes No
Verified answer

Chaitanya Golla 17,225 on at

Like (0)

Report

Hi,

Please assign the following security privilege/duty to the concerned user role.

Privilege Name: DirPartyPostalAddressAdvancedMaintain

Label: Maintain address details

(or)

Duty Name: CustCustomersMaintain

Label: Maintain customer master.

Was this reply helpful? Yes No