[Najeem JanatAli]

Hi All

Due to SOX, internail audit and COSO compliance, most of the D 365 security roles need to be revised. Whats the best practice :
-to copy out of box role and trim the extra duties and priviliges, or
-create  roles from sratch

As we have a public company and are in process of implmenting D 365 and also working on Fastpath as well

any one would like to share their experience, what are pros and cons

Thanks and kind regards

[Esther Paradoski]

Hi Najeem,

We duplicate any role we are going to assign to a user. I also duplicate any any duty or privilege before I make any changes to it at all. That way all of the out-of-the box security is untouched and I can always refer back to them when Microsoft makes big security changes (which is often).
I put our company acronym DUC at the front of any duplicated items so that they are easily recognizable.  I only build from scratch if it is a very specific duty or set of duties that need to be added.

——————————
Esther Paradoski
Ducks Unlimited Canada
Stonewall MB
——————————
——————————————-