Dynamics GP
Dynamics GP
Organizer:
- JOSE Organized by
-
-
Limited vs Full permission issue
-
Limited vs Full permission issue
We have always had full users and limited users in our GP environment. We are currently in a blackout period and needed to make sure no changes were made in Dynamics. We thought changing full licenses to limited would accomplish this. However, upon checking this we discovered this was not the case. Modifications could still be done (vendors could be added, batches created, etc). We did notice some inconsistencies between companies ā some companies did show only report and inquiry functions, others showed everything. We use a single role across all companies.
Thinking this might be a role issue, I created a new role with only inquiry and report functions based off of the built-in financial and reporting roles. I was still able to create a vendor in a company as well as delete the created vendor. Taking that one step further, I ran a report for the task (card_031) on maintenance vendors and addresses, operation: vendor maintenance. The user I was logged in as was not listed on the security operation access report under user type āfull accessā and as limited, the were no operations selected so there was no report ā which would be correct.
I am not sure how the user is able to do these operations with 1) a limited license which should restrict them to reports and inquiry only and 2) Having a role with only report and inquiry tasks.
What am I missing??
-
3 Replies
-
Have you checked that Security is enabled for all companies.
You need to check one by one looking at Tools >> Setup >> Company >> Company and make sure the Security checkbox is selected.
Or run this script on the DYNAMICS database to find the companies and update them if needed.
select CMPANYID, CMPNYNAM, USESCRTY from SY01500 where USESCRTY <> 1
–update USESCRTY = 1 from SY01500 where USESCRTY <> 1
Tasks and Roles do nothing unless Security is enabled.
If you have GP Power Tools installed, it will highlight companies without security enabled as a security risk.
-
Thanks, David. We have many, many companies! It appears that the older companies did not have this enabled.
On another note, I left this particular user as a full license with the restricted role and they now everything is almost restricted. Oddly, I have Transactions > Purchasing > Manual Payments and Transactions > Mekorma > Manual Payments still showing. Everything else is Inquiry/Report. š This will solve my licensing issue of not having everyone share the limited licenses if I can properly restrict with the roles!
-
-
Hi Richard
It is possible that the window is exempt from security.
If you have GP Power Tools, it will show you who has access to what and will identify if a window is exempt from security.
If the window is exempt, you can then use the Enhanced Security window to hide the menu option.
If you haven’t looked already, please what the Benefits Presentation:
Kind regards
David
Log in to reply.
