web
You’re offline. This is a read only version of the page.
close
Skip to main content

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Microsoft Dynamics GP (Archived)

Segregation of Duty Conflicts with Default GP Tasks?

(0) ShareShare
ReportReport
Posted on by 1,797

I'm looking at the following security tasks after it was discovered during our testing that users had too much access.  By their names, they appear to be narrowly defined.  However, closer examination shows that TRX_PURCH_001* and TRX_PURCH_004* tread into other functions and appear to have both custodial and recording functions.  Why would Microsoft give so much access to these tasks instead of just adding multiple tasks to a role?  Especially when doing so causes a segregation of duties conflict?  Thanks.

TRX_PURCH_001* - Enter purchase order transactions

  • Purchase Order Entry windows
  • Purchase Invoice Entry windows
  • Receivings Transaction Entry widows

TRX_PURCH_004* - Enter Receivings transactions

  • Purchasing Invoice Entry windows
  • Receivings Transaction Entry windows

TRX_PURCH_005* - Enter/match Purchasing invoices

  • Purchasing Invoice Entry windows

*This post is locked for comments

I have the same question (0)
  • callen Profile Picture
    4,595 on at

    I generally have created new roles for clients and modified existing tasks to fit their business. Some companies pay more attention to segregation of duties than others. A company with one accountant is not going to be too worried about segregation of duties.

  • K Day Profile Picture
    7,365 on at

     I work at a public company where we get audited on segregation of duties and GP security.  We don't use any of the GP security roles or tasks that came with the system.  Instead, we created completely fresh roles and added every task that these roles needed.  It was a little painstaking, but in the end it really helps you understand the security model and all the different operations that tasks are made of.  You can print the operation list of the Roles and Tasks, but sometimes the names are a little cryptic so actually going in and seeing what some of the operation are for is helpful.  You can double click on many window operations to see what window pops up so see if it is the right one.

  • MG-16101311-0 Profile Picture
    26,225 on at

    I am going live with a new GP implementation and we spent 6 months tailoring the existing security roles and tasks for the user community. We created new roles where needed, but for the most part use the existing ones as a template. In the process of doing this implementation, I used Support Debugging Tool's Security Profiler to validate security for every user.

  • Richard Whaley Profile Picture
    25,195 on at

    To answer your question, one person's overlapping tasks is another's ease of use.  You need to build the security model you need and not rely on GP's approach.  It works great in demos and in firms where security is not a severe issue.  The system, however, has power to create sophisticated security models.  You have to use that power.

    If you need help understanding GP security, check out our MS Dynamics GP Security Guidebook, available from our web site.  In any event, visit our site and sign up for our free newsletter.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Introducing the 2026 Season 1 community Super Users

Congratulations to our 2026 Super Stars!

Meet the Microsoft Dynamics 365 Contact Center Champions

We are thrilled to have these Champions in our Community!

Congratulations to the April Top 10 Community Leaders

These are the community rock stars!

Leaderboard > 🔒一 Microsoft Dynamics GP (Archived)

#1
Shravan Attelli Profile Picture

Shravan Attelli 1

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans