Security Role - Copy vs Duplicate

(0) Share

Report

Posted on by brianmaric

I need copy a security role and modify it for my own purposes. What's the difference between 'Copy' and 'Duplicate'?

I have the same question (0)

All responses (10)

Answers (2)

Suggested answer

André Arnaud de Cal... 301,158 Super User 2025 Season 2 on at

Like (0)

Report

Hi Brianmaric,

With duplicate, you create directly an exact copy of the object including all linked nodes. E.g. when you duplicate a role, it will copy the role including the linked duties and privileges on the role.

With the copy function, you can e.g. copy a privilege from a duty and paste the same privilege on another duty. Or on a higher level copy and paste a duty.

Was this reply helpful? Yes No
brianmaric on at

Like (0)

Report

I need to create a copy of Sales Clerk and remove the ability to delete a sales order and line. What's the best way to do this?

I'm thinking of Duplicating Sales Clerk and creating a new privileges that allows create, update but not delete.

Was this reply helpful? Yes No
brianmaric on at

Like (0)

Report

Or Perhaps create a copy of Sales order Maintain and modify it to exclude deletions and then add that to my duplicated role.

Was this reply helpful? Yes No
Verified answer

André Arnaud de Cal... 301,158 Super User 2025 Season 2 on at

Like (1)

Report

Hi Brian,

Your idea to duplicate the role and then create copies of duties and/or privileges which can be modified is the best way to go forward. You not only have to add these to the duplicated role, but you also have to remove the original duties/privileges.

Besides a copy of the duties/privileges, you can also consider 'Deny' options and add this to the role, however this might be confusing when someone will try to understand the role and reads "Maintain ..." as duty and forgets about checking deny privileges/duties.

Was this reply helpful? Yes No
brianmaric on at

Like (0)

Report

What's the difference between 'Unset' and 'Deny'...seems to achieve the same thing

Was this reply helpful? Yes No
Suggested answer

nmaenpaa 101,162 Moderator on at

Like (1)

Report

Deny overrides any other privilege that the user might have regarding the securable object.

So if the user has "delete" and "deny" access to Sales orders, they can't access sales orders.

But if they have "delete" and "unset", they can access and delete sales orders.

Was this reply helpful? Yes No
brianmaric on at

Like (0)

Report

That's interesting. I created a duplicate privilege and simply moved the status from 'Grant' to "Unset'. That removed the ability to delete Sales

Was this reply helpful? Yes No
Verified answer

nmaenpaa 101,162 Moderator on at

Like (0)

Report

Unset means the same than having no privilege. So if no other privilege in your role gives access to Sales orders, then indeed changing the only one to Unset would have such impact.

Was this reply helpful? Yes No
Pvansickler 50 on at

Like (0)

Report

Andre,

I did the duplicate of the OOB Retail Sales Manager and renamed it BJ Sales Manager. Nothing else and when I applied it to a user that replaced the Retail Sales Manager, the store/warehouse filtering didn't work as with the Retail Sales Manager. I thought the duplicate is an identical role as the original. If so, why is the duplicated role acting different?

Thank you,

Peter

Was this reply helpful? Yes No
André Arnaud de Cal... 301,158 Super User 2025 Season 2 on at

Like (0)

Report

Hi Peter,

Please create a new question on this forum as your question is different from the original question. Please, then include also some more information about what filtering you are expecting. My initial feeling is that there are eXtensible Data Security (XDS) policies in use which might be limited to one or more security roles.

Was this reply helpful? Yes No