Dynamics Community Forum Thread Details

GP Web Services Database

Hello:

If you do not have access to the GP Security Admin Console, is it possible to somehow review the database for GP Web Services to determine which users have access to Web Services?

Thanks!

John

Categories:

Development / Customization / SDK

Install and Upgrade

Other

Administration and Setup

Web Services and Workflow

Hello John,

The security configuration done in Dynamics Security Console is actually mainly held in the security store database that you create for Web Services during the install. If you look at the tables in this database, you'll see about 20 tables all beginning with AzMan. These include the AzRoleAssignment table, AzTask, Group_AppMember, Role_AppMember, and others.

However, if you look at the tables, most of the information in the tables is in GUIDs, which isn't easy to decipher.

For example, by default, the account I use to install Web Services is assigned the Security Admin Service User and SuperUser role for all companies, so in the AzMan_AzRoleAssignment table, I have two records. If I add someone else to a role, I get a third added to the table, but the Name and other information is all in a GUID value and not a table that you can just look at to see User A is assigned to this role, like you're hoping to find.

If you're looking to see which user account is the account that installed Web Services, and thus is the 'Security Administrator' for Web Service, which has access to the Dynamics Security Console and Web Services Exceptions Console, you can browse to C:\Program Files\Microsoft Dynamics\GPWebServices\SecurityAdminService\ directory, and open the DynamicsSecurityAdmin.config file......

......in this file, about 10 lines down, you'll see the following:

<system.web>

</authorization>

</system.web>

By default, the account that installed Web Services will be shown as 'allow users', however, I tried adding another domain account as a Security Administrator and restarted the service, but it wasn't added to this config file, so its also not accurate as far as who has permissions to Web Services.

Let us know if this doesn't address your question.

Thank you,

Quick Links

Leaderboard