web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

Community site session details

Community site session details

Session Id :
Finance | Project Operations, Human Resources, ...
Answered

Can we setup View-only AOT in production environment?

(0) ShareShare
ReportReport
Posted on by 5

Hi all,

We have AX support staff who need to use AOT to trobuleshoot issues reported by end users, however, giving AOT can direct access and overwrite value in database/tables, it is a compliance issue.  How can we restrict the support staff can view-only in AOT but not modify the database in AOT?

Thanks!

Ricky

I have the same question (0)
  • Verified answer
    nmaenpaa Profile Picture
    101,162 Moderator on at

    No, it's not possible. Only System administrator role has access to AOT and it has full access.

  • Ricky Fung Profile Picture
    5 on at

    Thanks for your prompt response.  Any work around I can achieve the compliance while allow the feasbility for support staff in troubleshooting?

    Thanks!

  • Verified answer
    nmaenpaa Profile Picture
    101,162 Moderator on at

    What kind of issues are you having, which need AOT access to be resolved? I would expect that in almost all cases the issues would be resolvable by looking at the AX user interface.

    If you always have issues with certain tables, you can develop forms that show data from these tables. Then allow your support staff to access these forms.

    Finaly, you can grant your support staff read-only access to AX database. But I can't imagine that this would be needed. I would really try the other approaches first.

  • Verified answer
    Satish Panwar Profile Picture
    14,671 Moderator on at

    Hi Ricky,

    Read-only AOT access can't be granted. I would assume you don't need all the time and of customer has concern, then something like screen share during issue review can be done (not the best alternative). We have had instance where customer support team is on call while accessing production. If issue needs more through analysis, consider environment restore to lower environment.

    Also use this restriction to your leverage. When you move to D365, no one has AOT access @ production. Max access is table browser and that is read only.

  • Verified answer
    André Arnaud de Calavon Profile Picture
    301,141 Super User 2025 Season 2 on at

    Hi Ricky,

    What is the reason that they have to use the AOT? If it is about browsing records in the table browser, consider providing an option to start this from the user interface.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Leaderboard > Finance | Project Operations, Human Resources, AX, GP, SL

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 456 Super User 2025 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 429 Most Valuable Professional

#3
BillurSamdancioglu Profile Picture

BillurSamdancioglu 239 Most Valuable Professional

Last 30 days Overall leaderboard

Product updates

Dynamics 365 release plans