Skip to main content

Notifications

Announcements

No record found.

Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Finance forum / Security Role - permis...
Finance forum

Security Role - permission to view and manage a subset of Purchase Orders

(0) ShareShare
ReportReport
Posted on by 25

Hi all,

I would like to create a custom security role to manage Purchase Orders. The problem is that I would like to give the permission to some users to manage some Purchase Orders and to other users to manage other Purchase Orders.

In other words not all the users must view and manage ALL purchase orders.

Is it possible include a filter on the records on the security roles?

Hope my question is clear.

Thanks & Regards,

Barbara

Categories:
  • Suggested answer
    André Arnaud de Calavon Profile Picture
    294,439 Super User 2025 Season 1 on at
    RE: Security Role - permission to view and manage a subset of Purchase Orders

    Hi Barbara,

    Satish did forward a link to an old blog I wrote in the past. This would possibly help you. I have written more blogs around this topic and moved all content to my new blog site: dynamicspedia.com/.../

    Like mentioned above, it is part of the development environment. As a developer, you can directly start with this framework without installing additional components. It is only managed using the development environment. It is not possible to configure it using the client.

  • Suggested answer
    Pedro Tornich Profile Picture
    955 on at
    RE: Security Role - permission to view and manage a subset of Purchase Orders

    XDS is something you need to manage by coding/developing.

    On the AOT under the Security node you will find the Security Policies.

    They can work as a role-based data filter, that filters a table according to a specific criteria, determined by a predefined Query.

    Take the BudgetPlanByMyOrganizationUserGroup security policy for example, it filters the table BudgetPlanHeader based on the query BudgetPlanByMyOrganizationUserGroup.

    Screen-Shot-2019_2D00_09_2D00_11-at-15.32.16.png

    In your case, you could create a new Security Policy to make your users see only specific Purchase Orders. You just need a query that returns only the orders you want to show.

  • Suggested answer
    Satish Panwar Profile Picture
    14,655 Moderator on at
    RE: Security Role - permission to view and manage a subset of Purchase Orders

    Take a look at link below  and it does have details.. it's not for purchase orders but for warehouses.

    dynamicspedia.com/.../

    Thanks,

    Satish Panwar

  • BarbaraBrunoIT Profile Picture
    25 on at
    RE: Security Role - permission to view and manage a subset of Purchase Orders

    Hello Pedro,

    thanks for your answer.

    I checked the doc but, since I'm new in D365 world, I cannot understand if XDS is:

    1) something I need to download

    2) something I can setup by myself in the Security module

    3) something I need to manage by coding/developing

    Thanks,

    Barbara

  • Suggested answer
    Pedro Tornich Profile Picture
    955 on at
    RE: Security Role - permission to view and manage a subset of Purchase Orders

    Hi Barbara,

    Yes, it's possible to restrict access to data based on security roles.

    To achieve that you need to use the XDS framework (Extensible Data Security).

    There is a "Microsoft Dynamics AX 2012 White Paper: Securing Data by Dimension Value by Using Extensible Data Security (XDS)" document:

    https://www.microsoft.com/en-us/download/details.aspx?id=26921

    And it's applicable for D365O because there is no changes in functionality so you can use it as a guide.

  • Suggested answer
    SouravDam Profile Picture
    11,723 on at
    RE: Security Role - permission to view and manage a subset of Purchase Orders

    Hi BarbaraBrunoIT ,

    My feeling is; even if you try to create a custom role or privilege and then assign to user level, it won't be effective. Question is; based on what parameter this custom role or privilege shall work which will determine to display some purchase orders to certain users and some for other users?

    Currently are you processing purchase orders based on certain department or branch wise? For example; PO for HR department, PO for Finance department, PO for IT department etc. ?

    Also you may need to check with developer if something can be done through Role Center on this!

    Best regards,
    Sourav Dam

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

November Spotlight Star - Khushbu Rajvi

Congratulations to a top community star!

Forum Structure Changes Coming on 11/8!

In our never-ending quest to help the Dynamics 365 Community members get answers faster …

Dynamics 365 Community Platform update – Oct 28

Welcome to the next edition of the Community Platform Update. This is a status …

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 294,439 Super User 2025 Season 1

#2
Martin Dráb Profile Picture

Martin Dráb 233,045 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,158 Moderator

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans