Finance | Project Operations, Human Resources, ...

Can we edit the OOB roles.

(0) Share

Report

Posted on by Muhammad Bilal 17

110

I have a scenario where I have to exclude the existing privileges from OOB roles, how can I achieve it through AOT or functionally? thanks.

I have the same question (0)

All responses (6)

Answers (0)

Blue Wang on at

Like (0)

Report

Hi Muhammad,

Create new roles,duties and privileges in AOT .

You can create roles extension, you can add new roles,duties to it, But you cannot add sub roles or permissions. You can not change values of any duty/privilege etc.

Was this reply helpful? Yes No
Muhammad Bilal 17 110 on at

Like (0)

Report

For example, I have the role "Project Manager" and there exists a ''XYZDuty" in it, and in this duty there exists a privilege "ABCPrivilege" and in this duty, there is an entry point for the "ProjectCostHour" form...now is there is any way I can exclude that entry point where the role is OOB.

Was this reply helpful? Yes No
Blue Wang on at

Like (0)

Report

As mentioned, I think you should create a new role and set privilege for it.

Was this reply helpful? Yes No
Suggested answer

Brian Kinser 815 on at

Like (0)

Report

typically i go into the security configuration tool, find that role / duty that contains the privilege and then just copy that role, it has all the duty/privileges in it. Name it XX_XYZRole then Go into that new role and you can easily remove that privilege so people assigned to that role will not see that entry point...

then go gack to original security role, see who is in that and move to the new role if needed, otherwise you now have 1 role that can see the entiry point and 1 role that cant....

Was this reply helpful? Yes No
Suggested answer

André Arnaud de Cal... 300,911 Super User 2025 Season 2 on at

Like (0)

Report

Hi Muhammad,

You can read my blog my for understanding. The scenario is about vendor bank accounts to be removed, but you can compare it with your duty and privilege. The blog starts with a traditional way to achieve it, but you can also continue reading for a deny option in a new privilege.

Security how-to: A purchasing agent is not allowed to maintain vendor bank details - Dynamicspedia

Was this reply helpful? Yes No
Suggested answer

Junaid Idrees on at

Like (0)

Report

Hi Bilal,

It will be easy to manage if you create a copy of your Original role and assign all required duties and Privileges and then you can remove the reference from Privileges or Duties whatever is not required to restrict your data entry point.

You can check the attach document just to give you some hints to control field level security/Entry point as well.

Field-Level-Security-in-D365-FO.pdf

Was this reply helpful? Yes No