Dynamics F/SCM Customer Experience (CRM) Dynamics GP Dynamics Business Central (NAV) Dynamics SL Power Platform Fabric Copilot

[Stuart Broach]

Hello,

Apologize is this is a rather elementary question, but what is the best practice for sharing Inquires and Reports in FO? 

I ask because I am coming across reports that I really find useful for the business, however, each time I need to find the menu item, and then find a privileges to add it to. That sounds simple enough, but we are in a validated GMP environment, and when I touch one privilege, it usually rolls up into other things I don’t want it touching because of the validation. 

Lastly, is there a standard for which privilege to add a menu item to? I believe technically I can add the menu item to any privilege I want to. But I want it to make sense i.e. a Batch Disposition history report should be accessible to the warehouse team, but is there a correct privilege to add the MI to in their department or just any ole priv will do?

I’m sure none of this made sense, so let me just ask; what do you all do to give access to inquires and reports?

Thanks

——————————
Stuart Broach
Medicago
——————————

[Josh Bazin]

Reviewing some of the standard privileges, MS has a privilege for accessing a particular report. This privilege will have the permissions to the menu item, tables, etc. required. This privilege is then added to an appropriate duty. For example, the “Generate attendance report” privilege is part of the “Inquire into manufacturing execution progress” and “Inquire into time and attendance progress” duties. Duties are then are assigned to appropriate Roles (eg, Shop supervisor, Production manager and others, in the manufacturing example). The roles are assigned to the users.

While privileges can be added to roles directly, it is recommended that only duties be assigned to roles for easier maintenance.

Not sure if that helps at all, but I hope it does.

——————————
Josh Bazin, CPA, CMA
(they/them)
Functional Analyst, NTT DATA
Edmonton AB
——————————
——————————————-

[Alex Meyer]

Stuart,

Reports within D365FO can be one of two objects types, normally they are menu item outputs but they can be menu item displays as well. To be able to generate the report a user would need Read permission to whatever object is driving that particular report.

There is some native tooling to help with this process, I write about some of there here: https://alexdmeyer.com/2016/12/12/missing-the-security-development-tool-in-dynamics-365-for-operations/

They include:
– Page Options -> Security Diagnostics
– Role/Duty/Privilege/Object access reporting
– Security Diagnostics for Task Recordings

These pieces of functionality will not give you the answer directly, but when used in conjunction can get you to the answer.

If you want a more automated solution, the scenario you are describing where you are trying to find which role, duty, and privilege give a user access to a particular object is one we get quite often and is why I created our Security Designer module within Fastpath. You would also be able to see the ‘affected objects’ that would be impacted if you made a change to a role, duty, or privilege (for example, if I make a change to this privilege which duties, roles, and users would I impact). Feel free to reach out directly if you would like additional information about this.

As far as answering your question about which privilege to add these objects to, that is going to have to be a business decision as you are correct that you have the ability to either add these objects to out of box privilege, create a custom privilege to add the objects to, or there may already be a privilege that gives you the necessary access to that object.

As always if you have questions about this, feel free to reach out.

——————————
Alex Meyer
Director of Dynamics AX/365 for Finance & Operations Development
Fastpath
Des Moines, IA
——————————
——————————————-