How to create a read/view role from a standard role having both read and write privileges

(4) Share

Report

Posted on by MYGz

2,473

Hi,

I have a scenario where people from Finance department are having SCM roles to have read access to some of the SCM data.

What's the best and efficient way to create new read only roles from the standard SCM roles.

One way is to go into the role and filter by keyword "View" or "Inquire into".

Apart from that what are some other efficient ways to cover the cases where Privileges are read only but don't start with "View" or "Inquire into".

Thanks

Categories:

Dynamics 365 Finance

I have the same question (0)

All responses (2)

Answers (2)

Sort by

Verified answer

André Arnaud de Cal... 305,703 Super User 2026 Season 1 on at

Like (1)

Report
Copy link

Link copied!

Hi MYGz,

When Finance users get out-of-the-box security roles for SCM-related forms, they will end up with an additional SCM license requirement. For that reason, and Segregation of Duties, it is recommended to consider read-only access.

Instead of providing all access, I recommend investigating what exactly these users need in addition to their current Finance features. If you add all SCM features, then the menu and application will be overwhelming to them.

In case you really want to provide read access to all SCM features, then indeed, you can search for the keywords you mentioned, but maybe some of them als contain "Read". Reports usually have the keyword "Generate".

To be able to get proper read-only roles for all or specific features, there is no real optimal way to do this. Due to some mistakes, some read privileges do actually grant full access and should be verified.

Was this reply helpful? Yes No
Verified answer

Adis 6,814 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!

Hi,

I had to restructure our roles due to the new license enforcement and I can only agree with André, there is no shortcut. You have to check what forms they need access to and then use either an existing privilege\duty\role or create a new one. Either way, I would always check the privilege\duty\role in the License summary form, if it has all objects entitled for the Finance role, or if for some reason SCM is necessary. Otherwise you have to check it in the PPAC, which is updated between 4-12 hours. Its hard to say what caused it after you ve done lots of changes then.

Kind regards, Adis

If this helped, please mark it as "Verified" for others facing the same issue

Keep in mind that it is possible to mark more than one answer as verified

Was this reply helpful? Yes No