D365 Finance & Operations and Dynamics AX Forum

Expand all | Collapse all

security issue - why is newly created parent role defaulting for all new users

  • 1.  security issue - why is newly created parent role defaulting for all new users

    SILVER CONTRIBUTOR
    Posted 15 days ago
    Hello
    I have a unique security issue I have encountered today.  I have recently started to use parent roles to organize security - parent roles can hold normal roles (and duties/privileges) and so I am experimenting with organizing security access at a job level.  Today, one of our system admins pointed out that one of the parent roles I created is consistently defaulting as a role in the 'Users' screen when we click on '+ New' button.

    Does anyone know whether this is a bug or if there is a setting or configuration that has been changed unintentionally?
    Thanks!




    ​​

    ------------------------------
    Calvin Eddings
    The Church of Jesus Christ of Latter-Day Saints
    Salt Lake City UT
    ------------------------------


  • 2.  RE: security issue - why is newly created parent role defaulting for all new users

    MICROSOFT MVP
    Posted 15 days ago
    Calvin,

    I have not seen this behavior before but I have a couple questions:

    1) Does the AOT name of the custom parent role you created contain the string 'SystemUser'?

    2) Does the custom parent role you created have the SystemUser role as a sub-role?

    ------------------------------
    Alex Meyer
    Director of Dynamics AX/365 for Finance & Operations Development
    Fastpath
    Des Moines, IA
    ------------------------------



  • 3.  RE: security issue - why is newly created parent role defaulting for all new users

    Posted 14 days ago
    Hi Calvin,

    Never seen a role assignment at the click of 'New' button however there is a feature called automatic role assignment that I have used at several places. See if the role you created is setup with a rule to assign that role based on certain query.
    Also, check if there is any batch job setup for auto role assignment.

    ------------------------------
    Raheel Rao
    Solution Architect
    Hickory Farms
    IL
    ------------------------------



If you've found this thread useful, dive deeper into User Group community content by role