Dynamics 365 F&O/AX Dynamics 365 CE / CRM Dynamics GP Business Central / NAV UG Dynamics SL Power Platform Fabric UG MS Copilot UG

[Monya Maccio]

Hello there,

I’m working with Audit and they’re requesting a list of users per company with Access to Add, Modify or delete GL accounts. I’m using the GP Power Tools and I was able to get a list of all users who have access to the task ADMIN_FIN_001 but it shows all users and I can’t seem to find a way to see only the ones with that access for a specific company. Am I missing something? Is there a script someone could share that I can run?

Thanks!

——————————
Monya Macció | IT Business Applications Manager | Kroenke Sports & Entertainment
Pepsi Center, 1000 Chopper Cir, Denver, CO 80204 USA
——————————

[Jo deRuiter]

‘s GP Power Tools is awesome, but I do not have it installed to walk you through the screens.

Hopefully he sees this and can respond to it.  In the mean time, I have a script that will give you security by user and company and what task, etc.??

SELECT [User ID]
,[User Name]
,[User Status]
,[User Modified on]
,[User Created On]
,[Assigned To Company DB Name]
,[Assigned To Company Name]
,[SECURITYROLEID]
,[SECURITYROLENAME]
,[SECURITYROLEDESC]
,[SECURITYTASKID]
,[SECURITYTASKNAME]
,[SECURITYTASKDESC]
,[SECURITY TASK CATEGORY]
,[Product ID]
,[ROLE CREATED DATE]
FROM [DYNAMICS].[dbo].[Z_AISLING_USER_SECURITY_TOTAL]
ORDER BY [User ID], [Assigned To Company Name],[SECURITYROLEID],[SECURITYTASKID]

this is from the attached scripts (Feel free to rename the Views if you would like)

SEE OTHER POST BELOW FOR MISSING VIEWS

——————————

——————————
——————————————-

[Monya Maccio]

Thank you so much Jo!

I’ll give it a shot 🙂

——————————
Monya Macció | IT Business Applications Manager | Kroenke Sports & Entertainment
Pepsi Center, 1000 Chopper Cir, Denver, CO 80204 USA
——————————
——————————————-

[David Musgrave]

You can use GP Power Tools without registration if you only have Fabrikam installed otherwise you can activate a free 30 day trial period.

As a partner you can sign up for free with Winthrop to get NRR keys.

What are you waiting for?

David

——————————
David Musgrave MVP, GPUG All-Star

Managing Director
Winthrop Development Consultants

Perth, Western Australia

http://www.winthropdc.com
——————————
——————————————-

[Jim Harris]

Hey David – is there a way to generate a report/file of this info that can be given to an auditor?  we have the same requirement and I use some scripts to get the info to them (but I’m betting Jo’s are better).  You can certainly see all of this info in Security Info and Security Profiler, but I really don’t want to have an auditor staring over my shoulder any more than absolutely necessary.

——————————
Jim Harris
Director of Information Systems
ExamWorks, Inc.
Atlanta GA
——————————
——————————————-

[David Musgrave]

If you click on the Show Resources button you will see the resources granted for whatever User & Company, Security Task or Security Role selected on the right hand pane of the Security Information window.

?Turn on the checkboxes for all the resource types and Show Series.  If you want to show how the user got access then select Show Tasks and Roles. You can export the data as Tab Delimited which can then be loaded into Excel and viewed by your auditor.

If you want to print, there is a print button from the Security Information Resources window, but it will be a large report…. don’t print to paper.

——————————
David Musgrave MVP, GPUG All-Star

Managing Director
Winthrop Development Consultants

Perth, Western Australia

http://www.winthropdc.com
——————————
——————————————-

[Jo deRuiter]

LOL, New computer and I haven’t installed a TON of stuff yet 😀 ?

——————————

——————————
——————————————-

[David Musgrave]

You are already signed up as a partner anyway and have NFR keys waiting. Just install and it will be available to you. It only takes a few minutes.

See the Benefits Presentation to learn what GPPT can do for you. So much more than Security.

?https://www.winthropdc.com/ftp/pub/GPPowerTools_Benefits.ppsx

FYI: I am currently working on Build 28…. lots of cool stuff coming.

——————————
David Musgrave MVP, GPUG All-Star

Managing Director
Winthrop Development Consultants

Perth, Western Australia

http://www.winthropdc.com
——————————
——————————————-

[Jim Harris]

is there one more view?  #3 references ?Z_AISLING_SECURITY_ROLES

——————————
Jim Harris
Director of Information Systems
ExamWorks, Inc.
Atlanta GA
——————————
——————————————-

[Jo deRuiter]

The last view is the TOTALS one, but attached up on the original response from me are all of the views involved in the final.?

——————————

——————————
——————————————-

[Scott Wardzinski]

, I think what Jim is asking is in the view  ?Z_AISLING_USER_SECURITY_TOTAL, there is the following join statement:

[DYNGP].[dbo].[Z_AISLING_SECURITY_ROLES] SRS ON USA.SECURITYROLEID=SRS.SECURITYROLEID

But in your attached documents there is no Z_AISLING_SECURITY_ROLES view. I am also very interested in trying your scripts out, and thank you for posting them.

——————————
Scott Wardzinski
Implementation Specialists (IS)
Hawley MN
——————————
——————————————-

[Beat Bucher]

Scott,
The views that Jo is referring to in her answer are actually the scripts that she attached to the post.. just named differently to make the name appear shorter than the view name itself.
If you run all the 4 scripts against your DYNAMICS database, then you should be able to run the 4th scripts and get all the details.
Hope this helps.

——————————
Beat Bucher
Business Analyst, Dynamics GP SME
Montreal QC/Canada
@GP_Beat http://www.gp-geek.com
Montreal QC GPUG Chapter Leader
MBS MVP (2015-2018)

——————————
——————————————-

[Jo deRuiter]

All Views attached.

??
?

——————————

——————————
——————————————-

[David Musgrave]

Using GP Power Tools from the Security Information window. Use the left hand pane drop down menu to select form by menu.

Then Select the Account Maintenance window from Cards >> Financial or Financial >> Cards

Then the Security Information window will show you the access for the selected user and company on the left pane.
On the right pane it will show you the users who have access.
You can change the company at the top of the window to view other companies, or you can expand users to see the other companies for that user.
If you use the Show only Selected users it will hide users without access. (Note: it also hides users with SuperUser access, I will fix that in the next build).

If you click on a user on the right side, the left pane will update to show how they got access to the window.

You are better off looking who has access to the Account Maintenance window itself rather than who has access to a task.

If you want to show who has access to a task such as CARD_0101*

Change the view on the right pane to by Security Tasks view, locate the task and expand it. To see a different company, change the company at the top of the window.
To see how they got access in the each company expand the user.

A user will only appear in the right pane in the by Security Tasks view if they have access to a task in at least one company. If it is not the current company, the checkbox at the user level will not be selected.  Note: that SuperUsers will not be shown as they are not actually assigned by role and task.

Also, more than one Task might give access and more than one role will be using those tasks. This is why working off the window is actually better. 

No need to use manual SQL Queries, GP Power Tools uses much more complex versions of those queries to provide the multiple views into the security model. It also includes Deny Based Security where you can fine tune security on a per user/company basis.  It allows you to deny access without having to duplicate tasks and roles.

There is no better tool for GP Security.

Regards

David

——————————
David Musgrave MVP, GPUG All-Star

Managing Director
Winthrop Development Consultants

Perth, Western Australia

http://www.winthropdc.com
——————————
——————————————-

[David Musgrave]

To what resources a user has access to, or what resources belong to a security Task or Role, use the Show Resources button from the Security Information window. Whatever User/Company, Task or Role is selected in the right hand pane will be displayed. If you click on a resource in the Security Information Resources window it will become the current resource in the Security Information window and you will be able to see what other users have access to it.

The data on the Security Information Resources window can be export as Tab Delimited, Comma Delimited or as an HTML table. You can also print the data on a report.

Another option to see Security Granted is to use the Security Analyzer window which has over 40 views looking for specific security issues. This can also be exported in Summary or Detail view.  See all the issues the views look for. 

Click on the image to see full size.

At this stage I don’t have it exporting or printing who has access to a particular resource. This information can only be seen on screen for now. I will add that in the next build.

——————————
David Musgrave MVP, GPUG All-Star

Managing Director
Winthrop Development Consultants

Perth, Western Australia

http://www.winthropdc.com
——————————
——————————————-