Dynamics 365 F&O/AX Dynamics 365 CE / CRM Dynamics GP Business Central / NAV UG Dynamics SL Power Platform Fabric UG MS Copilot UG

[John Walter]

We are on GP 2016 R2 and using the Requisitions module as well as workflow.  We have a number of self-service users setup that are using the web client to enter requisitions as well as approve/deny them.  When an approver goes on vacation they need to be able to delegate an alternate approver in their absence.  This is supposed to be accomplished thru User Preferences and then Workflow Delegation.  When a self-service user clicks on User Preferences in the web client, they receive the message that they do not have privileges to open this window.  No matter what security we setup for the self service users they continue to get this message leaving us unable to delegate a substitute approver.  Has anybody seen this or know a way around it?  Thank you.

——————————
John Walter
Walter Consulting
Dubuque IA
——————————

[Janeece Moreland]

I just saw an article on Monday regarding the Web Client security.

There are scripts provided that create the new security functions.

I searched for over an hour trying to find it for you but I cannot find it!

 

——Original Message——

We are on GP 2016 R2 and using the Requisitions module as well as workflow.  We have a number of self-service users setup that are using the web client to enter requisitions as well as approve/deny them.  When an approver goes on vacation they need to be able to delegate an alternate approver in their absence.  This is supposed to be accomplished thru User Preferences and then Workflow Delegation.  When a self-service user clicks on User Preferences in the web client, they receive the message that they do not have privileges to open this window.  No matter what security we setup for the self service users they continue to get this message leaving us unable to delegate a substitute approver.  Has anybody seen this or know a way around it?  Thank you.

——————————
John Walter
Walter Consulting
Dubuque IA
——————————

[Beat Bucher]

Hi Janice & John,
Check those links.. that should help :

https://community.dynamics.com/gp/b/dynamicsgp/archive/2016/01/25/ess-security-roles-in-microsoft-dynamics-gp-2013-and-microsoft-dynamics-gp-2015-what-do-they-give-users-access-to

https://community.dynamics.com/gp/b/dynamicsgp/archive/2014/12/02/new-security-roles-and-tasks-are-missing-when-upgrading-to-microsoft-dynamics-gp-2015

——————————
Beat Bucher
Business Analyst, Dynamics GP MVP
Ultra-Electronics Forensic Technology Inc.
Montreal QC/Canada
+1-514-489-4267
@GP_Beat http://dyngpbeat.wordpress.com/
Montreal QC GPUG Chapter Leader
GP2013R2 / MR2012 CU14
——————————
——————————————-

[Beat Bucher]

Actually,
the SQL scripts to add the missing ESS* roles will not fix this problem either, as it was forgotten in the script…
The Workflow Delegation resource should be added to a common task, as otherwise all employees involved in Workflows (not just for self-service users) will have the issue.
You need to pick the DEFAULTUSER security task and check the box all the way down :

This resource is shown with the small (i) icon, which means it is accessible to Limited Users also.

——————————
Beat Bucher
Business Analyst, Dynamics GP MVP
Ultra-Electronics Forensic Technology Inc.
Montreal QC/Canada
+1-514-489-4267
@GP_Beat http://dyngpbeat.wordpress.com/
Montreal QC GPUG Chapter Leader
GP2013R2 / MR2012 CU14
——————————
——————————————-

[Tracy Jo Dance]

?I am noticing that it is not possible to add the Workflow User Delegation task to the Default User with a User Type of Self Service.  It is however available for a Full user license.
  So how do Self Service users delegate their tasks? 

——————————
Tracy Jo Dance
RSM USA
——————————
——————————————-

[Beat Bucher]

it looks like this is a “programmatic” limitation of GP’s Self-Service users that are not able to access the “User Preferences” screen from the Web client.. 
Maybe someone from Microsoft can chime in here to confirm it or otherwise provide an explanation why it’s not available in security ..

——————————
Beat Bucher
Business Analyst, Dynamics GP SME
Montreal QC/Canada
@GP_Beat http://www.gp-geek.com
Montreal QC GPUG Chapter Leader
MBS MVP (2015-2018)
——————————
——————————————-

[Lucas Miller]

Good afternoon everyone,

I just tested this and verified that FULL and LIMITED users both have access to the User Preferences window while Self Service doesn’t have access to this.

This sort of access is determined by the existence of a SPECIAL_USERTYPE constant on the GP resources at the Dexterity level.  A window with a SPECIAL_USERTYPE of 2 is available to LIMITED users.  SPECIAL_USERTYPE = 4 corresponds to Self Service windows.  It looks like a window can only be either/or.

I was able to find a case from a couple years ago asking the same thing, but in order to change the Entry Key option.  It looks like they were prompted to create a Product Suggestion, but that was in the old system. I looked at the Ideas site, but either they didn’t create the suggestion or it didn’t have the votes to migrate to the new site.

I would recommend writing up a suggestion so everyone can vote on it:

Ideas List

Dynamics		remove preview
Ideas List Noticeably missing are the features added in the last couple versions. Considering the user manuals are no longer being updated, it is difficult to find relevant documentation on current features. Are the “What’s New” documents and various blogs the only documentation for GP these days? View this on Dynamics >

Let me know if you have any questions,

——————————
Lucas Miller
Support Escalation Engineer
Microsoft
Fargo, ND
——————————
——————————————-

[Beat Bucher]

Thank you  for this confirmation
 
I’ve added a feature/change request to the Dynamics GP board..
?
https://experience.dynamics.com/ideas/idea/?ideaid=dbf8a85e-70dc-e811-b96f-0003ff68a4b1

Let me know if I have missed something or needs clarification.

——————————
Beat Bucher
Business Analyst, Dynamics GP SME
Montreal QC/Canada
@GP_Beat http://www.gp-geek.com
Montreal QC GPUG Chapter Leader
MBS MVP (2015-2018)
——————————
——————————————-

[Tracy Jo Dance]

?So we tell our self service users that they are not able to delegate their approvals? 
  And the workaround is to add the delegated approver to the workflow temporarily?

——————————
Tracy Jo Dance
RSM USA
——————————
——————————————-

[Beat Bucher]

Which Version of GP are you using ? 
I’ve been testing this scenario in GP 2018R2 thru the Full Client and a Self-Service user account I used to login.. I was able to open the User Preferences window and click on the “Workflow Delegation” button, then enable the delegation in the next form.. 
This probably wouldn’t work from the Web Client side, but I can’t try it out, as I don’t have one setup right now.

——————————
Beat Bucher
Business Analyst, Dynamics GP SME
Montreal QC/Canada
@GP_Beat http://www.gp-geek.com
Montreal QC GPUG Chapter Leader
MBS MVP (2015-2018)
——————————
——————————————-

[Lucas Miller]

Beat,

I’m not seeing that same behavior in Dynamics GP 2018 R2.  I gave my Self Service user access to every security role (minus POWERUSER* since that is not available for this user type) in the Fabrikam, Inc. sample company.  When I first log in as the Self Service user I do see User Preferences, but the filter quickly applies and removed that, and many other items, from the menus.

Speaking to the original question for this thread, I think voting up the Product Suggestion that was entered is going to be the best way for us to raise some awareness around this issue.

——————————
Lucas Miller
Support Escalation Engineer
Microsoft
Fargo, ND
——————————
——————————————-

[Beat Bucher]

Hi Lucas,
Apologize, that was a mistake from my side.. while testing in the Fabrikam company, though I had changed the security Roles for ESS_* to a test user, the actual user type wasn’t saved as I changed it and remained full .. 

I changed it from the backdoor in the SY01400 table and after login back, even when using a navigation shortcut, it was denied access to the User Preferences form .. 

it goes even worse with the customization of the menu toolbar which is denied as well when trying to click on ‘Customize…’ :

I’m going to add this to the suggestion..

——————————
Beat Bucher
Business Analyst, Dynamics GP SME
Montreal QC/Canada
@GP_Beat http://www.gp-geek.com
Montreal QC GPUG Chapter Leader
MBS MVP (2015-2018)
——————————
——————————————-