Using the DYNSA Id to add users

(0) Share

Report

Posted on by Community Member

Hi all,

My customer does not allow us to use the sa id to do admin tasks in Dynamics GP 2013. So I have to use the DYNSA id. The problem is when the password for DYNSA is reset thru GP, I can login to GP but cannot login to SQL Server Management Studio. But if the password is reset thru SQL Server Management Studio, I can login to SQL Server but cannot login to GP. I understand it has something to do with encryption. But how can I get both logins to work? I can't be constantly resetting the password.

Any help would be greatly appreciated.

Thanks.

Regards,

Saras

*This post is locked for comments

I have the same question (0)

All responses (7)

Answers (0)

Richard Wheeler 75,848 Moderator on at

Like (0)

Report

RE: Using the DYNSA Id to add users

I would create another account in SQL that has the equal rights as DYNSA. You never be able be able login into GP as DYNSA and SQL as DYNSA with the same password. Make sure you make this new account a member of the DYNGRP.

Was this reply helpful? Yes No
Bill Campbell 12 on at

Like (0)

Report

RE: Using the DYNSA Id to add users

Richard, would you also need to make the 'new' user a sysadmin?

What is the 'lock' that GP puts on the Add User window that disables the OK or SAVE button? I thought it was a sysadmin user right from SQL.

Correct me if wrong.

Was this reply helpful? Yes No
Suggested answer

KirkLivermont 5,985 on at

Like (0)

Report

RE: Using the DYNSA Id to add users

I think Richard's suggestion to use two users is the way to go.

Bill,

It is not necessary to grant the sysadmin role in SQL to allow other GP Users to create new users. It is sufficient to grant the account db_accessadmin and db_security admin roles via SQL.

Regards,

Kirk

Was this reply helpful? Yes No
Bill Campbell 12 on at

Like (0)

Report

RE: Using the DYNSA Id to add users

Kirk, thanks for that - I was concerned about ever giving out that access as I had believed I was giving to much control to the user - as sysadmin - that is.

Thanks for clearing that up.

Was this reply helpful? Yes No
drummerboy_10 on at

Like (0)

Report

RE: Using the DYNSA Id to add users

Kirk -

I just tested your suggestion in my development environment and the db_accessadmin and db_securityadmin alone (done per database in the User Mapping window) are not going to allow a SQL user (outside of 'sa' and without the sysadmin server role assigned) to add users inside GP to the SQL environment. When I set these two along with the public Server Role assigned, the SAVE button in the user window was not enabled. I figured out I also had to assign the securityadmin server role to the user as well in order for me to try and add/save a new user.

However, when I set these User Mapping roles and Server role together I got the message:

DBMS: 911, Microsoft Dynamics GP: 0

When I looked what happened in SQL Server with this new test user, I noticed it was added to the Dynamics GP database but was not granted access to the DYNGP database role.

--Sean

Was this reply helpful? Yes No
Suggested answer

KirkLivermont 5,985 on at

Like (0)

Report

RE: Using the DYNSA Id to add users

Hi Sean,

It has been a couple of years since I needed to setup a user for this and I was going from memory. Sorry for any confusion.

Here is a link to a white paper that very thoroughly goes through the process www.gofastpath.com/.../fastpath-white-paper-minimizing-the-use-of-sa-in-microsoft-dynamics-gp

Regards,

Kirk

Was this reply helpful? Yes No
drummerboy_10 on at

Like (0)

Report

RE: Using the DYNSA Id to add users

Hi Kirk -

No problem! This was good information, because I was only aware of setting 'sysadmin' server role to the SQL user handling these situations. I printed the PDF and will look over it because I'm in a SOX compliant company and this will go a long way to resolving some of the concerns the IT department has about assigning the 'sysadmin' server role to a SQL user.

-Sean

Was this reply helpful? Yes No