AX / D365FO – Add Security roles to users in AX2012 #d365fo #ax2012

To add security roles to system users just follow these instructions Go to "System Administration" --> "Users" Search the user you want to assigni the new roles and Double-click on it Here you'll find roles already assigned to the user. If you want to assign new roles just click on "Assign Roles" button Choose the … Continue reading AX / D365FO – Add Security roles to users in AX2012 #d365fo #ax2012

AX – D365FO – Use Security role access Report to investigate which user roles have visibility and access level to system objects

Microsoft has added some additional new security reports that can be accessed through the web application. These can be found by going to System Administration -> Inquiries -> Security. Under this section you will find four reports: User Role AssignmentsSecurity Role AccessRole to User AssignmentsSecurity Duty Assignments To investigate which user roles have visibility and … Continue reading AX – D365FO – Use Security role access Report to investigate which user roles have visibility and access level to system objects

AX – D365FO – Error : “Access denied to method processreport in class” in AX2012

"If the permission node under the design of the SSRS report seems OK you can try to export and re-import the SSRS report by XPO. For me, it solved the problem (on AX2012 R2 CU7) without having to add any permission on roles or privileges. Under the hood, we found out that re-importing the report … Continue reading AX – D365FO – Error : “Access denied to method processreport in class” in AX2012

AX – D365FO – X++ code to find all the Duties related to specific Privileges in AX 2012

static void findAllTheDutiesForSpecificPrivileges(Args _args) { SecurityTask securityTask; SecuritySubTask securitySubTask; #define.SecurityTask("AbbreviationCodeImport_Import_RU") // your privileges name select firstOnly RecId from securityTask where securityTask.AotName == #SecurityTask && securityTask.Type == SecurityTaskType::Privilege; while select SecurityTask from securitySubTask where securitySubTask.SecuritySubTask == securityTask.RecId { select firstOnly * from securityTask where securityTask.RecId == securitySubTask.SecurityTask; info(strFmt(“%1,%2,%3″, securityTask.AOTNAME, securityTask.Name, securityTask.Type)); } }

AX – D365FO – X++ Code to find all the privileges for a menu item in AX

Create this job to find all the privileges for a menu item static void findAllThePrivilegeForSpecificMenuItem(Args _args) { SecurityTask securityTask; SecuritySubTask securitySubTask; SecurityTaskEntryPoint securityTaskEntryPoint; SecurableObject securableObject; while select * from SecurityTaskEntryPoint join SecurableObject where SecurableObject.RecId == SecurityTaskEntryPoint.EntryPoint && SecurableObject.Name == menuitemOutputStr(TaxReport_IT_ERA) //your menu item { while select * from securityTask where securityTask.RecId == SecurityTaskEntryPoint.SecurityTask { info(strFmt("%1,%2,%3,%4", … Continue reading AX – D365FO – X++ Code to find all the privileges for a menu item in AX

AX – D365FO – Set up segregation of duties

Security or policies may require that specific tasks be performed by different users. You can set up rules to separate tasks that must be performed by different users. This concept is named segregation of duties. This helps reduce the risk of fraud, and helps you detect errors or irregularities. For example, you might not want … Continue reading AX – D365FO – Set up segregation of duties

AX – D365FO – Exclude users from a role assignment

The HR department of USMF has requested to remove access for the Accounts receivable clerk role in Finance and Operations apps for an employee who has changed role. Go to System administration > Security > Assign users to roles. In the tree, select Accounts receivable clerk.Select Manually assign / exclude users. In the list, select a user.Select Exclude from role to exclude the selected users from … Continue reading AX – D365FO – Exclude users from a role assignment

Ax – D365FO – Assign users to security roles dynamically

The HR department of USMF has requested to dynamically assign users to the Accounting supervisor role based on a criterion defined by HR department. Associate the Accounting supervisor role based on the rule defined by the HR department to the selected employees. Go to System administration > Security > Assign users to roles. In the tree, select Accounting supervisor.Select Add rule to open … Continue reading Ax – D365FO – Assign users to security roles dynamically