Finance | Project Operations, Human Resources, ...

Related security objects in D365FinOps

(0) Share

Report

Posted on by AdnDalhi

336

Hello Daxers :)

I have a technical question about how we can get related objects permissions and licenses for all security roles in Dynamics 365 FinOps.

In Visual Studio there is a standard addin to view all related objects / or via UI in Security Configuration form > View Permissions

My Question in more technical, im asking here about :

If there is an Out-of box Data Entity that contains those related security objects and licenses for all roles , / or technicaly through x++ how to get them

Thanks

I have the same question (0)

All responses (5)

Answers (0)

Suggested answer

André Arnaud de Cal... 301,075 Super User 2025 Season 2 on at

Like (0)

Report

Hi Adax,

You can check the data entity "System security role" or "System security permissions".

Was this reply helpful? Yes No
AdnDalhi 336 on at

Like (0)

Report
Thanks André,

Actually i was using the Security Permissions data entity, but it's not presenting all the fields as they exist in the UI, here is my analysis:

After investigating the associated data permissions for selected security role, eg: Accounting manager (AOT Name :LedgerAccountingManager) ,

I got the following results:

In the UI ( Security Configuration > View Permissions for Accounting manager Role)

The global License type : Finance

When extacting all rows to an Excel file , the total objcet number is different when extracting data through SYSTEMSECURITYPERMISSIONENTITY Data Entity (UI = 12343 / Data Entity = 6981)

Here is my simple SQL Query to get all Security Permission for Accounting manager role from the Data entity :

SELECT
SYSTEMSECURITYPERMISSIONENTITY.SECURITYROLEIDENTIFIER AS 'Role Identifier',
SYSTEMSECURITYPERMISSIONENTITY.SECURITYROLENAME AS 'Role name',
SYSTEMSECURITYPERMISSIONENTITY.RESOURCETYPE AS 'Resource type',
SYSTEMSECURITYPERMISSIONENTITY.RESOURCENAME AS 'Context \ Resource',
SYSTEMSECURITYPERMISSIONENTITY.READACCESS AS 'Read',
SYSTEMSECURITYPERMISSIONENTITY.UPDATEACCESS AS 'Update',
SYSTEMSECURITYPERMISSIONENTITY.CREATEACCESS AS 'Create',
SYSTEMSECURITYPERMISSIONENTITy.DELETEACCESS AS 'Delete',
SYSTEMSECURITYPERMISSIONENTITY.CORRECTACCESS AS 'Correct',
SYSTEMSECURITYPERMISSIONENTITY.INVOKEACCESS AS 'Invoke',
SYSTEMSECURITYPERMISSIONENTITY.USERLICENSETYPE

FROM SYSTEMSECURITYPERMISSIONENTITY
WHERE SYSTEMSECURITYPERMISSIONENTITY.SECURITYROLEIDENTIFIER = 'LedgerAccountingManager'

I'm not able to get the same license type for each security permission object

eg: taking the example of the following security ressouce name : ADVANCEDLEDGERENTRYAPPROVALAPPROVE

In the query , the type is marked as number 4 , equal of (Entreprise in AOT > Operations in UI label) , but in Security permission interface is marked as Finance type

The Data Entity does not present the global security role associated to the Accounting manager role,

The data entity does not contains this information,

Data entity does not contains total of all security permissions objects as they exist in the UI,

Was this reply helpful? Yes No
André Arnaud de Cal... 301,075 Super User 2025 Season 2 on at

Like (0)

Report

Hi Adax,

Concerning the license type, I did expect some issues as Microsoft split the application into multiple license SKUs. You can learn more on the blog from Alex Meyer. The information is based on his own research and some interactions we both had with Microsoft for status and clarification: alexdmeyer.com/.../

Related to the number of objects. Have you identified if one outcome has duplicate records or found examples of data that is missing in the entity?

Was this reply helpful? Yes No
AdnDalhi 336 on at

Like (0)

Report
The limitation with SYSTEMSECURITYPERMISSIONENTITY data entity, that i'm trying to understand is the difference results if you compare if with user interface data.

The total number of securable objects, are not the same, the view permission through UI is more detailed and represent all objects, even if the privilege is used on multiple duties, taking example

The SYSTEMSECURITYPERMISSIONENTITY data entity total is less than the view in UI (eg. " Accounts receivable payments clerk " role , UI = 2231 / Data entity = 1556)

The data entity does not show duplicated elements, (in case of multiple uses of privilege on different duties, you will not get the global view of other privileges)

I understand the global role license type is defined after aggregating license fo all those securable objects of a role, when (Operations is highest one > etc), presuming that i continue using the same data entity, my question here is how can i aggregate them to get the global license type "Finance type" example of PaymAccountsReceivablePaymentsClerk Role ? , or if there any mechanisme to use to aggregate the user License type field

>

Was this reply helpful? Yes No
André Arnaud de Cal... 301,075 Super User 2025 Season 2 on at

Like (0)

Report

Hi Adax,

I had a look now myself. Your conclusions about the level of detail is correct. The license type being displayed at the data entity is not considering the split in application licenses. Previously, we had the 'Enterprise' as a license type. Now it has been split in e.g. Finance, Supply Chain Management, Commerce, etc.

I couldn't find another entity where the new licensing details are shown correctly. You might consider a customization.

Was this reply helpful? Yes No