Skip to main content

Notifications

Announcements

No record found.

Finance | Project Operations, Human Resources, ...
Answered

GP Web Services Database

Posted on by Microsoft Employee

Hello:

If you do not have access to the GP Security Admin Console, is it possible to somehow review the database for GP Web Services to determine which users have access to Web Services?

Thanks!

John

Categories:
  • Verified answer
    RE: GP Web Services Database

    Hello John,

    The security configuration done in Dynamics Security Console is actually mainly held in the security store database that you create for Web Services during the install. If you look at the tables in this database, you'll see about 20 tables all beginning with AzMan. These include the AzRoleAssignment table, AzTask, Group_AppMember, Role_AppMember, and others.

    However, if you look at the tables, most of the information in the tables is in GUIDs, which isn't easy to decipher.

    For example, by default, the account I use to install Web Services is assigned the Security Admin Service User and SuperUser role for all companies, so in the AzMan_AzRoleAssignment table, I have two records. If I add someone else to a role, I get a third added to the table, but the Name and other information is all in a GUID value and not a table that you can just look at to see User A is assigned to this role, like you're hoping to find.

    If you're looking to see which user account is the account that installed Web Services, and thus is the 'Security Administrator' for Web Service, which has access to the Dynamics Security Console and Web Services Exceptions Console, you can browse to C:\Program Files\Microsoft Dynamics\GPWebServices\SecurityAdminService\ directory, and open the DynamicsSecurityAdmin.config file......

    ......in this file, about 10 lines down, you'll see the following:

    <system.web>

       <authorization>

         <allow users="GPAPPS\Administrator"/>

         <deny users="*"/>

       </authorization>

     </system.web>

    By default, the account that installed Web Services will be shown as 'allow users', however, I tried adding another domain account as a Security Administrator and restarted the service, but it wasn't added to this config file, so its also not accurate as far as who has permissions to Web Services.

    Let us know if this doesn't address your question.

    Thank you,

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

December Spotlight Star - Muhammad Affan

Congratulations to a top community star!

Top 10 leaders for November!

Congratulations to our November super stars!

Tips for Writing Effective Suggested Answers

Best practices for providing successful forum answers ✍️

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,269 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,198 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Product updates

Dynamics 365 release plans