D365 Finance & Operations and Dynamics AX Forum

Expand all | Collapse all

AD-groups and security roles in F&O

  • 1.  AD-groups and security roles in F&O

    Posted Apr 07, 2020 02:37 AM
    I have imported a number of AD-groups to F&O, and to each of the groups I have assigned a different number of security roles. When adding a user to one of the groups, how can I then tell which specific roles this user has?

    I can go to my IT-desk and see which group the user belongs to and then look at how I have set up roles to that group within F&O, but this seems a but backwards. It must be some way I can check specifik users within the application?

    Anyone who knows?


    ------------------------------
    Sanna Borenberg
    D365 F&O Application Manager
    Södra skogsägarna
    ------------------------------
    Academy - Online Interactive Learning from Experts


  • 2.  RE: AD-groups and security roles in F&O

    MICROSOFT MVP
    Posted Apr 08, 2020 08:46 AM
    Sanna,

    There is not an easy way to do this within the application, as most of the reporting does not take into account Azure AD group assignments. For our clients, I had to write two custom reports to satisfy this requirement:

    A report to show Azure AD User Group Membership
    A user role report which took all group role assignments and showed them as assigned to the group members as well

    ------------------------------
    Alex Meyer
    Director of Dynamics AX/365 for Finance & Operations Development
    Fastpath
    Des Moines, IA
    ------------------------------

    Academy - Online Interactive Learning from Experts


  • 3.  RE: AD-groups and security roles in F&O

    MICROSOFT MVP
    Posted Apr 10, 2020 02:29 AM
    Edited by André Arnaud de Calavon Apr 10, 2020 02:47 AM
    Hi Sanna,

    Alex is correct. The authentication and inheriting of security role rights for a user is done when the user logs in, but the role is not directly assigned to the user. That is a pain for several reasons. In my personal blog, I listed them: https://dynamicspedia.com/2019/09/how-to-use-azure-active-directory-for-managing-users-and-security-in-dynamics-365-for-finance-and-operations/

    One of the features of the Security and Compliance Studio ISV solution from To-Increase is the visibility of Azure AD group assignments within the application. We are finalizing an enhancement on Segregation of Duties also in this area. I believe you are already a customer using this product.

    ------------------------------
    kind regards,

    André Arnaud de Calavon
    Product manager, Microsoft MVP - Microsoft Dynamics Business Solutions
    ------------------------------

    Academy - Online Interactive Learning from Experts


  • 4.  RE: AD-groups and security roles in F&O

    Posted Apr 20, 2020 07:31 AM
    Thanks for your replies! I do use Security and Compliance so I will look at it more closely there. Thanks!

    ------------------------------
    Sanna Borenberg
    D365 F&O Application Manager
    Södra skogsägarna
    ------------------------------

    Academy - Online Interactive Learning from Experts


If you've found this thread useful, dive deeper into User Group community content by role