Permission Best Practice to offer basic Sales/Purchase access but NO Access to Financial Management

(0) Share

Report

Posted on by B@houston

Hi everyone,

I have a request to offer a team of users with basic order processing (sales/purchase) permissions but NO access to all financial module. I am thinking the following options:

1. Customize the user interface to hide all un-relevant menu options. But the questions is, can user still use the Tell Me What to do Search box, and from there to navigate to bank accounts or financial reports? Have anyone have any idea?

2. To remove table/report access for bank account, chart of account, financial reports access. This is what we are doing right now. But it seems not good enough.

3. To record the permission sets in the Business Central, I have never test this before, but going to test this one.

If you are able to share some of your experience, like which one is doable and which are not, that will be very helpful.

Thank you so much.

I have the same question (0)

All responses (4)

Answers (0)

B@houston on at

Like (0)

Report

RE: Permission Best Practice to offer basic Sales/Purchase access but NO Access to Financial Management

Thanks Josh for your sharing. I am not sure i understand how security filers works.

Was this reply helpful? Yes No
B@houston on at

Like (0)

Report

RE: Permission Best Practice to offer basic Sales/Purchase access but NO Access to Financial Management

Wow, Thanks MahGah.

You experienced all of them. I like idea in 3) small piece of recording and re-usable in permission sets, it is smart and will save a lot of time for person like me to do it first time. Thank you again.

Was this reply helpful? Yes No
Suggested answer

MahGah 15,519 on at

Like (1)

Report

RE: Permission Best Practice to offer basic Sales/Purchase access but NO Access to Financial Management

Hi

We had similar issue and

1) Based on our experience yes user can still search and access those pages if user has a permission for it.

2) we tried that as well and sort of worked. But we needed better control.

3) We used recording and that helped us a lot. some minor tweak required after that but all worked well. the only suggestion is try to create different recording . For instance, one for creating SO and releasing / one for PO / etc. This way if one user want this access and not the other you do not need new recording. Also, makes troubleshooting easier.

One quick note

We realized if we assign a permission set to user and that permission set has the line similar to the following then it give permission to all tables to the user.

Was this reply helpful? Yes No
Suggested answer

JAngle 117 on at

Like (1)

Report

RE: Permission Best Practice to offer basic Sales/Purchase access but NO Access to Financial Management

Alternative option which requires minimal work would be to use security filters. For the sensitive tables add a security filter for data that doesn’t exist. For example a filter of D365BC is unlikely to be a gl account or bank account that is meaningful. If the group of users have a permission that can only see that option then you stop them seeing any data. Only draw back here is if they need to add gl accounts to lines on an order. They won’t have a lookup that displays any data.

The recorder is good and captures all the things you’re not likely to think of

Was this reply helpful? Yes No