Skip to main content

Notifications

Announcements

No record found.

Dynamics 365 Community / Forums / Finance forum / restrict access to Pro...
Finance forum
Answered

restrict access to Projects and project transactions

Posted on by 4,623 Super User 2024 Season 2

Dear all,

does any of the standard security roles restrict a user to access only the projects where s|he is assigned as Projekt Manager, Project Controller, Sales Manager or as a assigned Ressource?

Also it i required to see only project transactions from the projects s|he has access granted.  

How should be fulfill this requirement? 

  • andreasraithel Profile Picture
    andreasraithel 4,623 Super User 2024 Season 2 on at
    RE: restrict access to Projects and project transactions

    Dear Andre, dear Sumit,

    thank you for your reply and we will now go to estimate effort to find a solution on this way using XDS. If any of you interested to create the solution based on this requirement within the project module please feel free to contact me with PM on Linkedin.

  • Verified answer
    André Arnaud de Calavon Profile Picture
    André Arnaud de Cal... 290,252 Super User 2024 Season 2 on at
    RE: restrict access to Projects and project transactions

    Hi Andreas,

    You probably missed the second part of my reply. The XDS framework is really enforcing on the AOS level the security for individual records.

    If you want to learn more, you can read my blogs about this topic. I did spent quite some time in writing blogs and creating some examples which can be downloaded for free: XDS Archives - Dynamicspedia

  • Verified answer
    Sumit Loya Profile Picture
    Sumit Loya 2,230 on at
    RE: restrict access to Projects and project transactions

    Hi Andreas,

    As suggested, the only way to restrict transaction level data is by creating security policies using XDS framework and apply to required roles. Also note that XDS framework introduces some performance overheads so volume of data will be a key in using this

  • andreasraithel Profile Picture
    andreasraithel 4,623 Super User 2024 Season 2 on at
    RE: restrict access to Projects and project transactions

    Hy Andre,

    that is exactly is customers pain.

    We know "My Projects" which prefilters for the current user unchangeable as he is a Sales Manager, Project Manager or Project Controller:

    ((WorkerResponsible==HCMWorkerLookup::currentWorker())&&(WorkerResponsible!=0))||((WorkerResponsibleSales==HCMWorkerLookup::currentWorker())&&(WorkerResponsibleSales!=0))||((WorkerResponsibleFinancial==HCMWorkerLookup::currentWorker())&&(WorkerResponsibleFinancial!=0))

    This works fine for the first step.

    But as we go from Manage/Related Information/Pending transaction or Posted transactions there is just a column filter in the grid which filters to the current project.

    So user only needs to remove the Project-ID from column filter and can see all transactions of all projects, what is not desired.

    pastedimage1617344788886v1.png

    Same situation at Manage/Bill/Invoice journals, they just need to activate the show filter pane and remove the Project-Id to get access all project invoices.

    pastedimage1617344921415v2.png

    How do other Customer handle this? 

    As it is large company with a lot of different Business Units and departments, what would you suggest as you are very experienced in secutiy designs?  

  • Suggested answer
    André Arnaud de Calavon Profile Picture
    André Arnaud de Cal... 290,252 Super User 2024 Season 2 on at
    RE: restrict access to Projects and project transactions

    Hi Andreas,

    Out of the box, there is a list page for "my" projects. If you don't assign permissions to the menu item for all projects, this would be an initial security layer.

    However, you are also asking about the project transactions. In that case, there is nothing out of the box without doing some development. The eXtensible Data Security (XDS) would be suitable to build the record level security you are asking for.

Helpful resources

Quick Links

Dynamics 365 Community Update – Sep 9th

Welcome to the next edition of the Community Platform Update. This is a weekly…

Announcing Our 2024 Season 2 Super Users!

A new season of Super Users has arrived, and we are so grateful for the daily…

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 290,252 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 228,089 Super User 2024 Season 2

#3
nmaenpaa Profile Picture

nmaenpaa 101,148

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans