I have a situation where a company has multiple legal entities. Some of these entities have internal employees for assisting users with D365 F&O. Those internal users need access to everything a system admin would have EXCEPT any areas of the system that when adjusted affect all legal entities. So basically system admin minus any "global" settings. How can this best be accomplished?
It is possible to create a custom security role with all or almost all duties. Note that some specific pages are not included in standard privileges and duties. They will then not show up. In case the role is missing such pages, you can add new privileges and duties to get the access.
Some forms show different options when the system administrator role is assigned. E.g. the workflow history has a different view. The same view is presented to the IT manager role.
When you created such role, you can assign it to users and restrict access to particular legal entities. If you know what "global" settings to remove from this role, you can also check which duties are related and remove them from such role. It also gives the option to exclude some sensitive data like access to employee bank accounts and credit card information.
Was this reply helpful?YesNo
Under review
Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.