Automatic role assignment with LE access; export / import?

(4) Share

Report

Posted on by CU29041349-0

626

Hello:

I haven't been able to figure this out quite yet. Apologies if it's frowned upon to ask multiple questions.

I've been exploring Automatic role assignment and I have two main questions so far.

1. My policy attached to a role allows me to specify the LE(s) to apply the policy against. What if my user is only allowed access to specific LEs? How is that controlled?

2. Where the role policies are the same for specific roles, can role policies be exported from one role, then imported into another role?

Thanks in advance.

Categories:

Dynamics 365 Finance

I have the same question (0)

All responses (4)

Answers (2)

Sort by

Verified answer

SamikK 106 on at

Like (1)

Report
Copy link

Link copied!

From what I’ve seen, the role policy itself doesn’t control legal entity access, it just assigns the role. LE access still comes from the user setup, so you need to restrict that separately on the user/security side. Also, there’s no out-of-the-box way to export/import role policies between roles. If you need the same setup, you’ll have to recreate it manually or use a data entity / customization approach.

Was this reply helpful? Yes No
Verified answer

André Arnaud de Cal... 305,005 Super User 2026 Season 1 on at

Like (1)

Report
Copy link

Link copied!
Hi,

I'm not sure if I fully understand your questions. Let me try to help.

In case you create a rule for a role assignment, you can indeed specify organization assignments. In case a user meets the rule, it will get the role, including the assigned legal entities. In case a the rule has e.g. access to 3 LEs where the user only may have 1, then you will need to create another rule or assign the role manually. In case a rule has been automatically applied, you can't override the organization assignment.

There is no option to export a rule query and import it on another role. If you added tables to the query to achieve a specific policy, you need to apply the same settings. You can create a query in the AOT that can be recognized for automatic role assignment. That will then save time when creating multiple rules with similar query settings.

See also my blogs on this topic:

How to setup easy automatic role assignment - Dynamicspedia

Automatic role assignment in AX2012 - part 1 - Dynamicspedia

Automatic role assignment in AX2012 - part 2 - Dynamicspedia

Was this reply helpful? Yes No
CU29041349-0 626 on at

Like (1)

Report
Copy link

Link copied!

Thank you, @SamikK and @André Arnaud de Calavon

I have not researched the custom query, and if there are any advice or pointers, I'd appreciate a comment.

Was this reply helpful? Yes No
André Arnaud de Cal... 305,005 Super User 2026 Season 1 on at

Like (1)

Report
Copy link

Link copied!

In case you want to use a custom query, then as mentioned in my blog, it should start with the UserInfo table as data source. Then you can join any tables to get your result. In case you need help, feel free to create a new question on the forum.

Was this reply helpful? Yes No