Skip to main content

Notifications

Announcements

No record found.

Microsoft Dynamics GP (Archived)

Great Plains Data Masking

(0) ShareShare
ReportReport
Posted on by Microsoft Employee

Is there a way within Great Plains 2010 or through an add on application to do data masking for Great Plains

*This post is locked for comments

  • Joe Santangelo Profile Picture
    Joe Santangelo 10 on at
    RE: Great Plains Data Masking

    Is anyone finding that organizations are embarking on Developer Access projects to eliminate developer's access from production, provide break-glass production fix tools, mask or de-identify data in test and review data on logs for instances of sensitive data occurring?  

    We are seeing this more and more under risk reduction initiatives as part of an eGRC Framework.  Auditors love when entitlements are not correct and not maintained properly, it is low hanging fruit.  Without a full eGRC framework, reporting to auditors, senior management and the government often is lacking and initiatives to keep data out of the hands of those who should not have access are often missed.

  • Community Member Profile Picture
    Community Member Microsoft Employee on at
    RE: Great Plains Data Masking

    Thanks Leslie, that is a great option. Yes I heard your laughing. We have tried to explain that IT already has this access but to no avail so we are looking for a fell good measure to help with comfort levels.

  • L Vail Profile Picture
    L Vail 65,271 on at
    RE: Great Plains Data Masking

    Hi Jennifer,

    They want to hide the data from the IT staff!  Do you hear my laughter!  For clients that want the best security for their HR information, I have used a separate company database to house the payroll and then import summary data into the general ledger. But still, someone needs the 'sa' password.

    Kind regards,

    Leslie

  • Suggested answer
    Joe Santangelo Profile Picture
    Joe Santangelo 10 on at
    RE: Great Plains Data Masking

    You can utilize DMsuite from Axis Technology for this and also for any Dynamics Data Masking needs. Reply to me and we can set up a brief demo for you.

  • Community Member Profile Picture
    Community Member Microsoft Employee on at
    RE: Great Plains Data Masking

    Thank you all for your assistance. There is really two reasons for asking. HR wants to protect salary information from both me as the administrator when I create integrations and from our BI team when they work on reporting.

  • L Vail Profile Picture
    L Vail 65,271 on at
    RE: Great Plains Data Masking

    Hey Doug,

    Good point. That one's a bit trickier since a key segment cannot be encrypted. So, no hacking the Dynamics.dic with this one. I suppose you could create a new table that didn't use the SSN as a key, encrypt that fied, and then put a trigger on the real table and copy the real ssn to your new table. You could then replace the data in the real table with a masked value.

    Don't know, never tried it.

    Kind regards,

    Leslie

  • Douglas Karel Profile Picture
    Douglas Karel 2,140 on at
    RE: Great Plains Data Masking

    Would you also be looking at how the information is stored in the database tables?  Such as encrypting credit card numbers.  

    Are you looking at hiding complete fields from certain individuals?   I have never worked with it, but I believe that can be done within Field Level Security.

  • Verified answer
    L Vail Profile Picture
    L Vail 65,271 on at
    RE: Great Plains Data Masking

    Hi Jennifer,

    In native GP you can change the format mask in Modifier to change the field has it appears in the window. For example, the SSN's format mask is XXX-XX-XXXX, if you change it to ***-**-****, or even the words SSN Hidden,

    Then everywhere this field appears on any screens, it will be formatted as described above.

    For reports, you need to go into Report Writer, and do the same thing. You can also use calculated fields in report writer that will display only the last four digits of an SSN, or whatever. An exception is the Detailed Employee list report, neither method will hide the SSN on that report.

    Neither the forms, nor reports, would be considered Modified if you change one of the base resources. Make note that the resource changes are stored in the Forms and Reports dictionaries and are NOT exported with package files.

    Plan two would be the magic of VBA, I don't know of a way to do it globally, but you could do each field individually.

    Probably, someone has written something, maybe FastPath, but I do not know.

    Kind regards,

    Leslie

  • Dan Liebl Profile Picture
    Dan Liebl 7,320 on at
    RE: Great Plains Data Masking

    I think you need to be more descriptive of what you are looking for?   Are you importing master records?  Transactions?   Integration Manager or eConnect are tools to import.  

    Dan Liebl, CMA CPIM | Senior Consultant | OTT,Inc | DLiebl@OTT-inc.com

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

December Spotlight Star - Muhammad Affan

Congratulations to a top community star!

Top 10 leaders for November!

Congratulations to our November super stars!

Tips for Writing Effective Suggested Answers

Best practices for providing successful forum answers ✍️

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,280 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,253 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans