web
You’re offline. This is a read only version of the page.
close
Skip to main content

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Finance forum / How to assign security...
Finance forum

How to assign security hierarchy for roles containing conflicting duties?

(0) ShareShare
ReportReport
Posted on by Chris Chatwin 4

Hi,

I've created new duties for a development we've implemented, which will allow users to either manage new tables, maintain records, or view records only.

I've assigned these new duties to existing security roles dependent on the roles' requirements for the new development.

An issue I'm now facing is that where a user has multiple roles which contain conflicting duties for the new development, the view only duty seems to be taking precedence over the maintain duty, so users aren't actually able to create/edit records even though they have the duty to be able to.

Can anyone advise how I can create a hierarchy within duties that will allow the manage duty to override the maintain duty if a user has both duties under separate roles? And the maintain duty to override the view only duty, if the user has both duties under separate roles?

Many Thanks

Chris

  • André Arnaud de Calavon Profile Picture
    André Arnaud de Cal... 307,261 Super User 2026 Season 2 on at

    Hi Chris,

    Can you elaborate? Are the maintain and view duties using the same menu items or is it about different forms? Usually when you assign a view and maintain duty, maintain will be effective for the same menu item.

  • Chris Chatwin Profile Picture
    Chris Chatwin 4 on at

    Hi André,

    The duties are made up of privileges that are accessing the same form/menu items, with the privileges set as:

    View Only Privilege

    Read - Grant

    Update - Deny

    Create - Deny

    Delete - Deny

    Maintain Privilege

    Read - Grant

    Update - Grant

    Create - Grant

    Delete - Deny

    Is it due to me using 'Deny' as opposed to 'Unset'? I'm not sure what the 'Unset' setting would do, as we certainly don't want Read Only users being able to Update, Create or Delete. But at the same time, don't want this to override the Maintain privilege if users have roles which contain both privileges.

    Many Thanks

    Chris

  • Verified answer
    André Arnaud de Calavon Profile Picture
    André Arnaud de Cal... 307,261 Super User 2026 Season 2 on at

    Hi Chris,

    Deny is a new option compared to previous versions. This really means that whatever security is provided, it will be deny in any way. So, try to use Unset instead.

  • Chris Chatwin Profile Picture
    Chris Chatwin 4 on at

    Hi André,

    Yes, I changed the settings on the View Only privilege to 'Unset' instead of 'Deny' and that has given me the desired result, whereby users with both Maintain and View only privileges can Maintain, but users with just View only privilege can only view.

    Many thanks for your advice.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

November Spotlight Star - Khushbu Rajvi

Congratulations to a top community star!

Forum Structure Changes Coming on 11/8!

In our never-ending quest to help the Dynamics 365 Community members get answers faster …

Dynamics 365 Community Platform update – Oct 28

Welcome to the next edition of the Community Platform Update. This is a status …

Leaderboard > Finance

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans