[Mark Jones]

We have users in our AR department that need to be able to view all vendors, but also need to be able to edit bank account information only for vendors that belong to specific vendor groups.  Is it possible to allow both for a user?

These users already have roles assigned to them that allow them to view all vendors.

I also created a new role with Record level security that gives its members full control of All vendors, but only for certain vendor groups in its Query.

When I add this new role to these users, they receive full control over all vendors, not just those in the Record level security Query.

I am setting up a new user with just the new role to handle the immediate need for being able to edit banking information for just those certain vendors.  But I am hoping there is a better solution that will allow them to do both in their own user account, to avoid also having to log on as this special user just for the vendor banking edit function.

Thank you.

——————————
Mark Jones
Lead IT Business Analyst
Unigroup
Fenton MO
——————————

[André Arnaud de Calavon]

Hi Mark,

Record level security is not suitable for this requirement. In addition this feature is depreciated and replaced by eXtensible Data Security. Using this framework, you can achieve your requirement. I have shared some examples. The warehouse example has an implementation where users can e.g. see all purchase orders, but can only edit the orders related to their assigned warehouses. You can find the examples when you link to my blog: https://kaya-consulting.com/extensible-data-security-examples/

——————————
kind regards,

André Arnaud de Calavon
Solution Architect, Microsoft MVP – Microsoft Dynamics Business Solutions
——————————
——————————————-

[Mark Jones]

Thank you.  It looks like this wouldn’t be too difficult for our AX partner to develop for us.

——————————
Mark Jones
Lead IT Business Analyst
Unigroup
Fenton MO
——————————
——————————————-