D365 Finance & Operations and Dynamics AX Forum

Expand all | Collapse all

security question - assigning legal entities to 'system user' role

  • 1.  security question - assigning legal entities to 'system user' role

    Posted 5 days ago

    Is there a best practice concerning which organizations to assign to the 'system user' role – for instance is there a case to not assign any organizations and leave it assigned as 'all companies'?  Managing organization assignments is a significant effort in our organization and I would like to have a standard rule for the system user role.  A typical case is that a user will have its functional roles (i.e. accountant, accounting manager, etc) assigned to say 5 legal entities.  But I have not been sure if I need to set up the system user to have the same 5 legal entities assigned to the functional roles.


    Calvin Eddings
    The Church of Jesus Christ of Latter-Day Saints
    Salt Lake City UT

  • 2.  RE: security question - assigning legal entities to 'system user' role

    Posted 4 days ago
    Hi Calvin,

    What a coincidence. I just released a blog about this topic (in some sense). I had a customer with over 2000 legal entities and highly sensitive companies. To restrict users from seeing too many legal entities (too hard to choose the correct one) or to really hide the company name when it should not be visible for users, you can restrict the system user role to the ones that are applicable to the users. When it is restricted, they can't switch to that company anymore and also won't see an empty menu when other roles are company restricted as well. For sure test carefully if everything will still work correctly. Potentially you have to include the 'dat' company anyway.
    Here is a blog with the use case, but also how to remove the default system user role assignment if you want to use automatic role assignment also for the system user role: https://dynamicspedia.com/2020/02/dont-want-to-have-the-automated-system-user-role-assignment/

    kind regards,

    André Arnaud de Calavon
    Product manager, Microsoft MVP - Microsoft Dynamics Business Solutions


If you've found this thread useful, dive deeper into User Group community content by role