Finance | Project Operations, Human Resources, ...

How to create system admin read only?

(0) Share

Report

Posted on by Adam

Hello Experts,

I am trying to create System Admin Read Only role and basically I am creating a new role, a new duty and a new privilege. In the new privilege, I am assigning all permissions like menu items, tables, ..etc as read only. I would like to know if this is the method or different to create read only role for whole D365 FO application.

Any suggestions/feedback much appreciated.

I have the same question (0)

All responses (3)

Answers (0)

Sort by

Suggested answer

Hana Xue Microsoft Employee on at

Like (0)

Report
Copy link

Link copied!

Hi,
You can check out a recent blog post that mentions methods for creating a read-only system administrator role in FO.
https://d365fokartik.home.blog/2024/01/03/how-to-create-read-only-system-admin-role-in-d365-finance-and-operations/
Best Regards,
Hana

Was this reply helpful? Yes No
Suggested answer

Ramit Paul 22,805 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Hi, your method is not 100% full proof, you wont be able to use filter in some forms like inventory on hand where you need to add dimensions by adding filter.

Use auditor role instead or create new role.

Was this reply helpful? Yes No
André Arnaud de Cal... 304,678 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!

Hi Adam,

Hana shared a blog with a possible way to create a read-only role. Instead of adding menu items or privileges, you can also consider adding duties with specific naming conventions. I wouldn't just add all tables as most of the tables and fields do inherit permissions from the form entry. "View" and "Inquire into" are usually granting read access to display menu items only. After that, you would need to test and finetune. You can check the actual permissions if you click on View permissions from the role. In case there are items with higher access, check if they are required for the normal functioning of the form as Ramit provided one example.

Note that some forms, like the Workflow history, have a different view in the case of being a system administrator or Information technology manager.

After each update of Dynamics 365, a customization, or ISV solution, you would need to revisit the role and check if some new functionality needs to be added to the role.

Was this reply helpful? Yes No