[Mark Jones]

We are on AX 2012 R3 cu12

1) I went to System administration > Setup > Security > Security roles, selected a role and clicked on Override permissions.

2) I expanded the Tables/Fields, found the table I wanted, unchecked the “Do not override” box and set the “Override access level” to “Full Control”.

3) I then selected the fields I wanted in that table, unchecked the “Do not override” box and set the “Override access level” to “View”, then closed that form.

The next day users received an error message when trying to access a form that uses that table saying that they had no permissions to that table.  I went back to the same location and my changes were not saved.  The entire table was now marked as No Access.

I walked through the same steps, closed the override form, clicked on another role then back and verified that my changes were still there.

What caused my settings yesterday evening not to save correctly?  I did this in my default, USR layer.  Do I need to log into AX through the CUS layer and perform the same changes? 

The only Microsoft documentation on this for AX 2012 I found was at https://docs.microsoft.com/en-us/dynamicsax-2012/appuser-itpro/create-or-modify-a-security-role, which wasn’t in-depth.

——————————
Mark Jones
Lead IT Business Analyst
Unigroup
Fenton MO
——————————

[André Arnaud de Calavon]

HI Mark,

Can you verify if there is a source control setup which would prevent changes? If there is source control enabled, you have to check-out the role before making the changes. When you did save the changes, did you verify if the role was changed accordingly in the AOT?

——————————
kind regards,

André Arnaud de Calavon
Solution Architect, Microsoft MVP – Microsoft Dynamics Business Solutions
——————————
——————————————-

[Alex Meyer]

Mark,

Going along with what Andre said, can you validate that the changes were successfully pushed to the AOT for your override permissions? If you have version control around this, then the check out procedure Andre mentioned is required.

You didn’t mention what sort of environment this was in, but if this environment gets refreshed from another AX instance did the security you made get overridden by that move?

——————————
Alex Meyer
Director of Dynamics AX/365 for Finance & Operations Development
Fastpath
Des Moines, IA
——————————
——————————————-

[Mark Jones]

Thank you both for your feedback.  The changes were still there this morning from yesterday morning’s corrections, so maybe I just didn’t do something correctly the first time on Tuesday evening, since this was the first time I ventured into that area.

We don’t have version control enabled.

We have three AOSs.  One is set up solely as a batch server.  I would think that this data is stored in the database, not in cache.  So I wouldn’t expect that to be a factor as it has been with some issues like the beginning trial balance amounts (cached on the AOS).  But this wouldn’t be the first time I am surprised with such an unexpected discovery.

——————————
Mark Jones
Lead IT Business Analyst
Unigroup
Fenton MO
——————————
——————————————-

[Marcy Ashley-Selleck]

To add to the convo, I wanted to point out that even though the security tables are not cached, anyone with roles and privileges impacted by the security change will need to log out and back in for it to be effective.  So perhaps those folks had not logged off after you made your initial changes and got stuck in an interim state..

HTH,
Marcy Ashley-Selleck

——————————
Marcy Ashley-Selleck
Lead Platform Engineer
Dealer.com
Burlington VT
——————————
——————————————-