D365 Finance & Operations and Dynamics AX Forum

Expand all | Collapse all

Security Help Needed

Jump to Best Answer
  • 1.  Security Help Needed

    SILVER CONTRIBUTOR
    Posted 14 days ago
    Good Morning,
    I am having difficulty in removing the ability to Convert prospects to Customers within the quote in D365 Finance and Operations.  I have determined that the ability is somewhere within the Action menu items or Display menu items within the Sales Quotation Details (SalesQuotationMaintain) privilege.  I have been unsuccessful to this point in preventing this function.  Any help is greatly appreciated.



    Thank you,

    ------------------------------
    Mandy Funk
    Business Analyst
    Wenger Manufacturing
    Sabetha KS
    ------------------------------
    Academy - Online Interactive Learning from Experts


  • 2.  RE: Security Help Needed
    Best Answer

    SILVER CONTRIBUTOR
    Posted 14 days ago
    Edited by Shilpi Thakur 13 days ago
    Hi Mady,

    I would recommend testing this first in a sandbox environment, with the assignment of System administrator role to yourself as a user in D365 F&O instance.

    In D365 F&O : Navigate to System administration > Security configuration > Privileges > Maintain sales quotation details

    Look for the AOT name : SalesQuotationTableDetailsMaintain
    Privilege in this case is : SalesQuotationListPage+

    As this is a button and you can see it on the sales quotation form information page this is controlled by the buttonCovert2Customer.
    So change the permissions on this privilege and publish it to see the changes.

    Note: Add a specific role for whom these changes need to be replicated before publishing the changes, otherwise it will be made unavailable across any role associated with that privilege.


    ------------------------------
    Shilpi Thakur
    Freelance AX/D365 Microsoft Consultant
    Dynact Consulting Ltd
    ------------------------------

    Academy - Online Interactive Learning from Experts


  • 3.  RE: Security Help Needed

    SILVER CONTRIBUTOR
    Posted 13 days ago
    Shilpi,
    Thank you for reminding me to go one level deeper into the Controls.  That was the area I was missing.  I have been working on this in one of my dev environments with copied roles, duties and privileges so I was not worried about changing OOB roles.  :)  I appreciate the advice.
    Thanks again,
    Mandy

    ------------------------------
    Mandy Funk
    Business Analyst
    Wenger Manufacturing
    Sabetha KS
    ------------------------------

    Academy - Online Interactive Learning from Experts


  • 4.  RE: Security Help Needed

    SILVER CONTRIBUTOR
    Posted 12 days ago
    I am reaching out again on this same topic.  Changing the permissions on the Convert to Customer button within the Privilege: SalesQuotationTableDetailsMaintain
    Display Menu Item: SalesQuotationListPage+ worked perfectly.

    When I navigate within D365 to the SalesQuotationTable page the ability to Convert to Customer remains after I have changed the permissions for Privilege: SalesQuotationTableDetailsMaintain Display Menu Item: SalesQuotationTable Controls: Convert to Customer button = Deny for all

    Does anyone have some insight into where I need to go to remove users ability to Convert to Customer on the sales quotation record?

    thank you,
    Mandy


    ------------------------------
    Mandy Funk
    Business Analyst
    Wenger Manufacturing
    Sabetha KS
    ------------------------------

    Academy - Online Interactive Learning from Experts


  • 5.  RE: Security Help Needed

    SILVER CONTRIBUTOR
    Posted 12 days ago
    Edited by Shilpi Thakur 12 days ago
    Hi Mandy,

    Couple of things for you to answer here:

    • Did you assign the changed security configuration [in your case the Privilege permissions] to a role?
      • In D365 we have role based security, access is granted to a role and not to a user. Users are then assigned to the role. Example : Role - System administrator with the changed security configuration will be assigned to a user Julia Funderburk.
    Navigate to the References section and click on Roles and add the role to which the privilege with changed permissions should be assigned.

    2. Did you publish the security configuration changes to reflect on the selected role? Your security configuration changes cannot be used by a role, unless you publish them.

    3. Did you assign the role with the security configuration changes to a user?
    Navigate to System administration > All users > Select user and assign the role to the user.

    Would recommend to log back into the instance after completing the above changes.

    Have a look at the below link for more information on Role based security in Dynamics 365.

    https://docs.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/sysadmin/role-based-security

    Hope this helps.







    ------------------------------
    Shilpi Thakur
    Freelance AX/D365 Microsoft Consultant
    Dynact Consulting Ltd
    ------------------------------

    Academy - Online Interactive Learning from Experts


  • 6.  RE: Security Help Needed

    MICROSOFT MVP
    Posted 10 days ago
    Hi Mandy,

    Note that the first form you showed is the list page. You removed access from the page SalesQuotationTable. You have to apply similar settings to the page SalesQuotationListPage. In that case it works in my test environment. However, when you open the details, the menu item SalesQuotationTableForEdit is called. Also from this entry point you need to apply these changes, but the control is not visible here. In that case, you probably have to do this customization via the AOT.
    Not all form controls are recognized correctly using the security configuration form. I had some discussions with Microsoft related to this. I need to complete some more analysis before I can make a conclusion what is working and what is missing in Dynamics 365. At least, this scenario was supported in AX 2012.

    ------------------------------
    kind regards,

    André Arnaud de Calavon
    Product manager, Microsoft MVP - Microsoft Dynamics Business Solutions
    ------------------------------

    Academy - Online Interactive Learning from Experts


If you've found this thread useful, dive deeper into User Group community content by role