Dynamics 365 F&O/AX Dynamics 365 CE / CRM Dynamics GP Business Central / NAV UG Dynamics SL Power Platform Fabric UG MS Copilot UG

[Brenda Button]

Help!  I have a manager who needs the ability to delegate workflow for individuals who are out of the office unplanned.
He’s able to access the Workflow User Delegation window under User Preferences, however the name and search icon are disabled.  He is only able to delegate his own workflow.  I am able to select different users and add delegates, but my security is Power User.  Is this function only available to Power Users or is there some Security Task I can give him? 

GP2016 R2

——————————
Brenda Button
IT Specialist
Norwich Public Utilities
Norwich CT
——————————

[Jonathan Winiarski]

Hi Brenda,

You will need to add security to do this, you can add it to a task such as the TRX_PURREQ_026
see the screen shot I attached.  let me know if this helps. 

——————————
Jonathan Winiarski
GP Systems Admin
Southwest Diagnostic Imaging, Ltd.
Scottsdale AZ
——————————
——————————————-

[Brenda Button]

Hi Jonathan – 

Thank you for your reply!  
The odd thing is this person’s security has all the workflow tasks selected.  Still no access.  
I’m completely baffled on this.

——————————
Brenda Button
IT Specialist
Norwich Public Utilities
Norwich CT
——————————
——————————————-

[Shawn Dorward]

Not sure if this will help or not but there is a task called “Directory Account Lookup” – make sure the user has access to that task as well.

——————————
Shawn Dorward
Twitter: @ShawnMDorward
Implementation Consultant
InterDyn Artis
——————————
——————————————-

[Brenda Button]

Thanks Shawn for responding!  The user initially did not have this task selected for his role.  I did add it but still no luck.

——————————
Brenda Button
IT Specialist
Norwich Public Utilities
Norwich CT
——————————
——————————————-

[Beau Mundt]

Hi Brenda,

This was a great question!  I did some digging into it and found that this window specifically seeks the POWERUSER role, in its current form there is no way around it but adding them to the POWERUSER role. 

You could most likely do a modified form that bypasses the security check and opens the window for all users regardless of role, then control access to that window via standard GP security.

Hope that clears things up!

Thanks,

——————————
Beau Mundt
Sr. Consultant
Implementation Specialists (IS)
Hawley MN
——————————
——————————————-

[Brenda Button]

Hi Beau – 

You have confirmed what we thought was happening.  We too found specific references to the Poweruser role using SQL Server Profiler and GP Power Tools logging.  With GP security being so versatile, I’m surprised this is secured this way.  Oh well!  

Thank you for your suggestion on modifying the form.  That’s a possibility we will explore.  🙂

——————————
Brenda Button
IT Specialist
Norwich Public Utilities
Norwich CT
——————————
——————————————-

[Beat Bucher]

Hi Brenda,
I confirm what Beau reported.. I too discovered that Microsoft possibly forgot to add the workflow delegation windows to a regular PTE security role in GP.. thus leaving that accessible only to POWERUSER..
This is definitely not correct and you should add the task to one of the existing PTE roles (which are the new ones added when WF 2.0 was implemented), or even better, the DEFAULTUSER security task, since it applies to all users in GP.

PS: sorry for the screenshot on top of the reply, this is currently a bug with IE.

——————————
Beat Bucher
Business Analyst, Dynamics GP MVP
Ultra-Electronics Forensic Technology Inc.
Montreal QC/Canada
+1-514-489-4267
@GP_Beat http://dyngpbeat.wordpress.com/
Montreal QC GPUG Chapter Leader
GP2013R2 / MR2012 CU14
——————————
——————————————-

[Brenda Button]

Hi Beat –

Thanks for responding.  I did add the Workflow User Delegation operation to the DEFAULTUSER task however still unable to search or enter user names.

Like Beau said, the window is scripted as such to only allow POWERUSER the ability to update another user’s delegates.  If you’re not POWERUSER you are only allowed to assign delegates to your own tasks.  I simply wanted to give the purchasing manager the ability to assign delegation to users who who are out of the office unplanned and not have to make him POWERUSER to do this function. 

——————————
Brenda Button
IT Specialist
Norwich Public Utilities
Norwich CT
——————————
——————————————-

[Beau Mundt]

Hi all,

Just to follow up on this again.  I confirmed there is dexterity code on this window in the source code that specifically looks for the POWERUSER role.  The only way around it currently is to remove the security check with a modified form or to add the user to the POWERUSER role. 

Hopefully in a future patch, Microsoft will fix the security on this window. 

Thanks,

——————————
Beau Mundt
Sr. Consultant
Implementation Specialists (IS)
Hawley MN
——————————
——————————————-

[Beat Bucher]

Thanks Beau,
I didn’t realized that part.. I’ve opened a Connect suggestion to vote for the change :  https://connect.microsoft.com/dynamicssuggestions/feedback/details/3132693/allow-workflow-2-0-delegation-for-every-users

——————————
Beat Bucher
Business Analyst, Dynamics GP MVP
Ultra-Electronics Forensic Technology Inc.
Montreal QC/Canada
+1-514-489-4267
@GP_Beat http://dyngpbeat.wordpress.com/
Montreal QC GPUG Chapter Leader
GP2013R2 / MR2012 CU14
——————————
——————————————-

[Brenda Button]

Awesome!  Thanks guys! I voted!

——————————
Brenda Button
IT Specialist
Norwich Public Utilities
Norwich CT
——————————
——————————————-