Beginner's guide to NAV roles and security?

Navision Articles

Get our Free Newletter

Don't you have the time to be online here at DUG every day? So how do you follow what is going on in the Dynamics industry and community?
If you subscribe to the DUG Newsletter then you can relax! We will make sure that you don't miss the big news!

Check out our
Newsletter Subscription Center
page a complete list of our different newsletters.

This post has 3 Replies | 3 Followers

Not Ranked
Posts 16
230 Points
Joined: Aug 13, 2007
Last Online:
Jun 18, 2009 18:59
Chickenmunga Posted: Aug 20, 2007 22:35
How helpful was this post/question? Please rate here:

So I've been tasked with the chore of applying security roles to our company's NAV deployment.  I've decided I need 10 different roles, but none of the existing roles seem all that helpful.  For example, I've tried creating a role for our purchasing manager:  he needs to create purchases, create vendors, and create items.  I have applied several of the pre-made roles, and he can see some things he shouldn't, reports crash, and he can't select items for purchase.

 

Is there an easy way or best way to get started?  I'm feeling a bit overwhelmed.[:'(]

Top 100 Contributor
Male
Posts 223
4,061 Points
Joined: Apr 15, 2007
Last Online:
Mar 18, 2010 4:56
Location: New Zealand
DynamicsNAVMVP
Moderator
Gaspode replied on Aug 20, 2007 22:55
How helpful was this comment/solution? Please rate here:

Hi Chickenmunga,

security setup in Navision is hard. Take a look at this thread for some good advice.

Our approach is typically take the standard NAV roles that match your requirements and then tweak them to correct security errors in testing.

 I have heard that the security tool mentioned in the thread is good but have never used it. Basically it allows you to "record" the security access needed to perform certain tasks and then save the settings as a new role. The main disadvantage I can see from this is people rarely know all of the activiities a user will need to perform so you are going to be constantly adding new permissions to your role.

 Good luck.

Dave's Blog

Not Ranked
Posts 16
230 Points
Joined: Aug 13, 2007
Last Online:
Jun 18, 2009 18:59
Chickenmunga replied on Aug 21, 2007 2:16
How helpful was this comment/solution? Please rate here:

Thanks for the great tip, we are looking into this.  I want to start peering at that document tomorrow! 

 

For today, I was able to use the Client Monitor (under Tools->Client Monitor) 

  1. First, I recorded my activity with the Client Monitor
  2. I then filtered the Client Monitor's parameter field by table.
  3. Then, I created a new role with full access to all the tables listed by the Client Monitor
  4. Now I tested to make sure I could do all the tasks I needed
  5. Finally, I began removing permissions so I could lock down my user (prevent them from deleting stuff, etc)

Not sure if this is the same tool or not, but it has the same problems as what you describe.  However, it beats wding through several thousands of tables or guessing at roles!

Top 10 Contributor
Male
Posts 6,085
55,998 Points
Joined: Apr 12, 2001
Last Online:
Mar 19, 2010 0:45
Location: Prague, Czech Republic
DynamicsNAVMVP
Moderator
SystemAdministrator
David Singleton replied on Aug 21, 2007 10:21
How helpful was this comment/solution? Please rate here:

Personally I found the tool great for finding that "lost" object, so you could see all objects bing used when a user had an error message. But I never liked using it to crate roles, because then the roles became too specific. Also you never test every possible option, so you still miss one. 

David Singleton - MVP Dynamics NAV Dynamics NAV Consultant since 1991 Available for Navision Go-Live assistance
Dynamics Book

Page 1 of 1 (4 items) | Get this RSS feed | Bookmark and Share

Related Posts

    No Related Posts