Approve Security of the production environment

(0) Share

Report

Posted on by ALAhmed

916

Hi,

SOX audit asks our customer to approve that no one can modify the database data in production and delivery customization follow the standard process( Delivery in UAT sandBox and then in production environment by LCS)

they want to make sure that no action can be done directly in production.

Do you have any MS documentation that can explain that requirement and that can we provide to our customer.

Many thanks in advance for your reply.

Regards

I have the same question (0)

All responses (5)

Answers (1)

Ludwig Reinhard Microsoft Employee on at

Like (0)

Report
Copy link

Link copied!

Hi,

Do you need that information for AX2012 or D365FO?

Best regards,

Ludwig

Was this reply helpful? Yes No
ALAhmed 916 on at

Like (0)

Report
Copy link

Link copied!

For D365FO please

Was this reply helpful? Yes No
Verified answer

nmaenpaa 101,166 Moderator on at

Like (1)

Report
Copy link

Link copied!

You can check this document, and chapter "Security and administrative access".

download.microsoft.com/.../Microsoft_Dynamics_365_for_Operations_Service_Description_EN_US.pdf

Was this reply helpful? Yes No
vinitgoyal2005 6,332 on at

Like (0)

Report
Copy link

Link copied!

Alex,

Please go through the document shared by Nikolaos. The only access to the Production database is from D365FO UI. No customization can be pushed directly to Production. It has deployed to the UAT environment. once the package is deployed to UAT then only it can be made 'Release candidate'. Only RC packages can be applied to Prodcution.

Was this reply helpful? Yes No
alexmeyer.itguy 670 on at

Like (1)

Report
Copy link

Link copied!

Alex,

I wrote about the best practice of moving security between environments here: alexdmeyer.com/.../

Also production databases within D365FO are locked and not accessible by anyone other than Microsoft. If you want to restrict access to the Security Configuration page within your production instance, you could remove access to this form for anyone other than SysAdmins which is what a lot of our customers do.

Was this reply helpful? Yes No