D365 Finance & Operations and Dynamics AX Forum

Expand all | Collapse all

D365 retail store manager role - transactions restricted to address book

  • 1.  D365 retail store manager role - transactions restricted to address book

    Posted 27 days ago

    I have a question about security access for a retail store user (security roles, not point of sale).  We are interested to restrict retail store supervisors such that they can only create transactions (inventory journals, orders) for their own store.  It has been explained to me that D365 has an out of box role, retail store manager, that has some built in security such that the person assigned can only do transactions for the stores that correpond with the address book assigned to their worker in human resources for point of sale access.

    We have been using a custom role similar to the out of box 'Retail store manager' to this point, but without any sort of restriction like that. Is anyone familiar with this situation and what security items or method exists that might achieve a restriction of transactions to correspond with a worker's assigned address book of point of sale sites?


    Calvin Eddings
    The Church of Jesus Christ of Latter-Day Saints
    Salt Lake City UT

  • 2.  RE: D365 retail store manager role - transactions restricted to address book

    Posted 26 days ago
    Hi Calvin,

    I believe that the following security policies exist on the Retail store manager role:
    1. RetailAssortments
    2. RetailCustomer
    3. RetailInventLocation
    4. RetailPurchOrderLine
    5. RetailPurchTable
    6. RetailSalesOrder
    7. RetailSalesQuotation
    8. RetailStore1
    9. RetailWorker

    In essence, each of the tables (i.e. PurchTable, Store, etc.) are restricted based on the Address book that is assigned to the Worker record attached to the User who has the Retail store manager assigned to them in combination with the Address book(s) that are assigned on the Retail store records.  Basically, if my worker record has "Address Book 1" assigned, then I will be able to see and transact for any Stores that have that same Address book assigned to them.

    In our business, the most critical ones are InventLocation, PurchTable and PurchOrderLines.  As you can imagine, the InventLocation restricts the Warehouse that is available for selection when creating Inventory journals or Transfer orders.  It also limits the journals and transfer orders that are visible to the user.  Similarly, the PurchTable and PurchOrderLines restrict Purchase orders/lines in the same way.

    Out-of-the-box, the only way you can use this security is by having Retail stores configured.  Of course, you may be able to customize to make it work in your scenario (possibly, adding address books on warehouses?) but I have never seen this done.

    Corey Warawa
    Functional Architect
    Liquor Stores Limited Partnership
    Edmonton AB

If you've found this thread useful, dive deeper into User Group community content by role