Unified Operations & Dynamics AX Forum

Expand all | Collapse all

Removing Users from Management Reporter

  • 1.  Removing Users from Management Reporter

    GOLD CONTRIBUTOR
    Posted 13 days ago
    AX 2012 R2
    Management Reporter 2.12.15000.56

    Looking in MR at Security - Users, there are numerous Users who are still listed even though their AX accounts are disabled and in 1 case, completely deleted. For most of those Users, their Active Directory accounts have also been removed.

    What is the proper procedure for I removing them from the listing in MR?

    Thanks,
    Carol

    #AX2012​​

    ------------------------------
    Carol Holmes
    Business Systems Supervisor
    Vesta Solutions, Inc.
    Temecula CA
    ------------------------------


  • 2.  RE: Removing Users from Management Reporter

    TOP CONTRIBUTOR
    Posted 13 days ago
    Hi,
    You either have to remove the user from AX or withdraw all security elements that give access to MR.
    Please see:
    http://terrychoo.com/management-reporter-security/
    Best regards,
    Ludwig

    ------------------------------
    Ludwig Reinhard
    Sycor
    Veitshoechheim
    ------------------------------



  • 3.  RE: Removing Users from Management Reporter

    GOLD CONTRIBUTOR
    Posted 12 days ago
    MR Security is base on the roles your assigned to and does not pay attention as for assigning MR security.  There are a couple of specific roles is looks at that are finance based to assign the designer and view licenses.  Don't get me wrong a user account if deactivated will not let that account run a report but to remove them remove a users role assignments while your deactivating them.  Probably thinking its crazy that deactivating a user is not enough to remove there MR security but that's how it works.  From a security standpoint however removing roles but not deleting a user is best practice in that if the user ever came back but in a different role you wouldn't want them to assume the same rights.

    ------------------------------
    Mark Zerr
    AX Technical Analyst
    New Sunshine LLC
    Indianapolis IN
    ------------------------------



  • 4.  RE: Removing Users from Management Reporter

    Posted 11 days ago
    ​We had the same issue.  This probably is not the best answer but the only one that worked for us.  If you have access to the SQL tables you can run this script to get rid of the unwanted user.

      update [ManagementReporter].dbo.[SecurityPrincipal]
      set IsDeleted = 1
      where Name = 'userYouWantToDelete'

    ------------------------------
    Paula Phillips
    Advisory Programmer Analyst
    Metropolitan Nashville Airport Authority
    Nashville TN
    ------------------------------



  • 5.  RE: Removing Users from Management Reporter

    GOLD CONTRIBUTOR
    Posted 11 days ago
    Thanks for the current responses.

    Ludwig - Unfortunately that Terry has in that blog is for older version. It doesn't work that way in our MR.

    Mark - Already do the removal of roles when disabling Users. Only have deleted Users when they NEVER logged into AX.

    Paula - Thanks, may have to do it that way. Not sure about SOX compliance issues though....

    Carol

    ------------------------------
    Carol Holmes
    Business Systems Supervisor
    Vesta Solutions, Inc.
    Temecula CA
    ------------------------------



  • 6.  RE: Removing Users from Management Reporter

    GOLD CONTRIBUTOR
    Posted 11 days ago
    Carol, it doesn't sound good that if you have removed the roles and users are still there.  In my mind that says it's not syncing security correctly with AX.  You could certainly do what Paula has suggested but I would be concerned about what is happening that AX is not syncing user security correctly.  I would personally export out the building blocks, uninstall/reinstall MR, and import the blocks back in.

    If you choose to go that route rename the databases for MR and MR DataMart before you reinstall as you probably left them to the default names and it will see them when reinstall.   Plus you would have them if your auditors are that picking.   As for SOX I worked for a SOX company a couple years back since MR is just consuming data it shouldn't be a big deal to rebuild it.  My auditors felt as long as I wasn't changing AX data it was not an issue.

    Good luck, I'm sure this is frustrating.


    ------------------------------
    Mark Zerr
    AX Technical Analyst
    New Sunshine LLC
    Indianapolis IN
    ------------------------------



  • 7.  RE: Removing Users from Management Reporter

    TOP CONTRIBUTOR
    Posted 9 days ago
    Hi Carol,

    When removing the security from within AX2012, the users should be deleted from MR. Have you checked the logs if there are sync issues? If you cannot find something, contact Microsoft Support. This issue was solved in CU11 before. You are running CU15. Probably there is a regression...

    ------------------------------
    kind regards,

    André Arnaud de Calavon
    Solution Architect, Microsoft MVP - Microsoft Dynamics Business Solutions
    ------------------------------



  • 8.  RE: Removing Users from Management Reporter

    SILVER CONTRIBUTOR
    Posted 6 days ago
    Carol,

    Take a look at this tool. I've used it at previous organizations as part of the decommission process when a team member leaves the org:

    https://www.loganconsulting.com/blog/microsoft-dynamics-ax-2012-user-management/

    ------------------------------
    Ian Gorman, PMP, MCSE
    Consultant
    ------------------------------