Skip to main content

Notifications

Announcements

No record found.

Community site session details

Community site session details

Session Id :
Finance | Project Operations, Human Resources, ...
Suggested answer

Security by Department Dimension

(0) ShareShare
ReportReport
Posted on by 5

My company has begun to route miscellaneous invoices for approval using the workflow. We are scanning and maintaining invoices electronically viewable in AX.  I have found that anyone can view any open Invoice Journals.

Is it possible that they can only be viewed if there are dimensions related to their department?

Also, is it possible that only invoices can be searched back up (after posted) and viewed, if the dimension was for their department?

  • André Arnaud de Calavon Profile Picture
    André Arnaud de Cal... 292,516 Super User 2025 Season 1 on at
    RE: Security by Department Dimension

    Hi,

    Like mentioned above, you can implement XDS. Do you have the dimensions on header or line level? How do you determine which dimensions belong to which user? That would be important to determine how to build the XDS policy. Ievgen already shared the link to my blogs.

  • Takaya Profile Picture
    Takaya on at
    RE: Security by Department Dimension

    XDS is the way but it's complicate to maintain so it's the option to think the organization more simple to use standard security configuration and legal entities.

  • Suggested answer
    Ludwig Reinhard Profile Picture
    Ludwig Reinhard Microsoft Employee on at
    RE: Security by Department Dimension

    Hello IN AX2012 Help,

    As Ievgen mentioned, XDS would be an option to achieve this.

    Before making the respective setup please double check whether this is really needed because the setup will take some time and might slow down system performance.

    If there is no potential 'harm' done by people seeing invoices from other departments then I would think twice whether I would go along this way.

    Yet this is something you need to discuss internally.

    Best regards,

    Ludwig

  • Suggested answer
    RE: Security by Department Dimension

    I understand your requirement like if Invoice is posted against "Marketing" department/Cost center, those invoices should be only viewable by Marketing employee.  Unfortunately This is not possible Out of the box. Please refer to the below Microsoft white paper link to get an idea to achieve this by using Extensional data security (XDS)

    docs.microsoft.com/.../securing-data-by-dimension-value-by-using-extensible-data-security-white-paper

    Some related posts on XDS - Finance and Operations:

    https://community.dynamics.com/365/financeandoperations/b/dynamics365foaxhub/posts/extensible-data-security-xds-in-dynamics-ax-finance-and-operations

    https://alexdmeyer.com/2019/02/20/extensible-data-security-xds-framework-in-d365fo/

  • Suggested answer
    Mea_ Profile Picture
    Mea_ 60,278 on at
    RE: Security by Department Dimension

    It could be implemented with XDS https://dynamicspedia.com/2018/06/extensible-data-security-examples/

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Daivat Vartak – Community Spotlight

We are honored to recognize Daivat Vartak as our March 2025 Community…

Announcing Our 2025 Season 1 Super Users!

A new season of Super Users has arrived, and we are so grateful for the daily…

Kudos to the February Top 10 Community Stars!

Thanks for all your good work in the Community!

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 292,516 Super User 2025 Season 1

#2
Martin Dráb Profile Picture

Martin Dráb 231,409 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Product updates

Dynamics 365 release plans