10 Nov’16

D365 Business Central

User Security Capabilities and Differences in NAV 2017 and Dynamics 365 Financials

Introduction

User security can be achieved by assigning different permission sets to users. Permissions can be assigned to users as per their role. A permission set is a collection of database permissions for one or more objects in the Microsoft Dynamics NAV database and Dynamics 365 Financials that you can assign to one or more users.

This article summarizes User security capabilities and differences in Navision 2017 and Dynamics 365 Financials. And can be used as guide when evaluating which platform to select for an implementation, when you have specific security requirements.

We have implemented User Security for our Client Titan Labs. You can read its case study here.

The following is a Scenario for a Sales User:
Administrator User having Super permissions creates a Sales user who will have access to only Sales, Customers and Items. Other information on Finance, Purchase etc. should be hidden from this Sales user.

Prerequisite:

1. Microsoft Dynamics Navision 2017
2. Microsoft Dynamics 365 Financials.

User Security in NAV 2017

  1. In Navision 2017, Administrator user having Super Permissions creates a new permission sets which include access to only those objects i.e. tables, pages etc. which the user should access. E.g. A sales user can access sales orders, sales quotes etc.
  2. The new permission set created is assigned to the user. This will ensure that the user does not have permissions to access any tables, pages or any other objects regarding finance, purchase etc.
  3. Depending on the setting in theUI Elements Removal field in the Microsoft Dynamics NAV Server Administration tool, only UI elements on objects in the license or on objects that the user has permissions to will appear in the user interface.
  4. LicenseFileAndUserPermissions is selected for the UI Elements Removal field in the NAV Server Instance. This ensures that a UI element is removed if the related object is not included in the license file and the user does not have permissions to the object as defined in the AccessByPermission property for the related UI element.
  5. A copy of permission sets can be created and edited.

Dynamics 365 Financials

  1. In Microsoft Dynamics 365 Financials, the Administrator user having super permission can create users in the Admin centre but only the default permission sets available in Dynamics 365 Financials can be assigned to the users, it is not possible to edit or add to the existing Permission Sets.
  2. Permissions Sets are assigned to each user in the User Card either by directly adding them or by associating a User Group which has Permissions sets assigned.
  3. It is suggested to give D365 BASIC permission set to all users. This will allow users to get into Dynamics 365 for financials and open the home page without permission errors.
  4. It does give READ (but not INSERT, MODIFY, or DELETE) access.
  5. Sales User is assigned a Predefined User group D365 Sales. This user has following permissions
    1. D365 BASIC
    2. D365 CUSTOMER EDIT
    3. D365 CUSTOMER, VIEW
    4. D365 ITEM, EDIT
    5. D365 ITEM, VIEW
    6. D365 SALES DOC, EDIT
    7. D365 SALES DOC, POST
    8. D365 DYN CRM MGT, LOCAL
  6. After assigning D365 Sales User Group to the Sales User, the Role Centre displays information with respect to the User group assigned i.e. D365 Sales but the User will still have access to Information like Finance, Purchase etc. when he tries to find it using the search bar which actually should be disabled.
  7. A copy of permission sets cannot be created. Permission error is displayed.
  8. Error displayed while creating new permission set.

    Note: The above error was raised at Dynamics 365 Business edition community, and we received a response from Microsoft employee that the functionality to fine-tune permissions for users will be added in a future update.

Conclusion

Microsoft Dynamics Navision 2017 allows an Administrator user to create Users with limited permissions by creating new permission sets and assigning it to the User.

Dynamics 365 Financials allows an Administrator user to create Users but is not allowed to create new permissions sets. The default permissions sets can only be assigned to the User.

 

Written by

Team Member

CloudFronts

Leave a Reply

Your email address will not be published. Required fields are marked *

Want to streamline your business processes?

  • This field is for validation purposes and should be left unchanged.

Recent Articles

  • How to Run Reports when report processing takes long to cause Session Time-out

    12 July’ 2019

    Introduction: I’ve observed that when NAV is used for a very long time, the report which needs heavy processing ta...

    Read more
  • First Canvas Power App: Learn Few Easy and Important Commands

    11 July’ 2019

    As my thoughts build to initiate writing this blog, similar was the feeling when I first thought about exploring Power A...

    Read more
  • Tips to Solve your Infinite Loop Issue

    3 July’ 2019

    While using fetch xml to retrieve records more than 5000 records and if you have multiple entities involve in it. There ...

    Read more
  • Deploy Dynamics 365 Operations Environment using Lifecycle Services – Part 2

    2 July’ 2019

    In this article, we will take look at the post configuration setting for Finance and Operations environment.You can lo...

    Read more
  • Shift/Statement posting error in Microsoft Dynamics 365 For Retail

    1 July’ 2019

    In this blog I am going to  demonstrate how to deal with errors generated during statement posting. At times while you ...

    Read more
  • We respect your privacy.
  • This field is for validation purposes and should be left unchanged.