Granting the least possible rights in Ax

Say your asked to create a login for a few users, that basically need access to one function in Ax, but nothing else. First, you need to create a group for them, and remove all the “standard” rights under User group permissions. Our contractor also had been using creative solutions, as such I had to manually hunt down and reset the keys that weren’t created per Ms’ standards.

Cannot select a record in Employee (EmplTable). Access Denied: You do not have sufficient authorization to modify data in database.

Ax throws this error at login.

When you’ve removed all the permission entries defined, try starting Ax using a user that only is member of this new group. In my setup at least, I was given this error: Cannot select a record in Employee (EmplTable). Access Denied: You do not have sufficient authorization to modify data in database.

Basic -> Tables topnode. Grant Read Access

Basic -> Tables topnode. Grant Read Access

To get around this I once more had to resort to hunting down the security key in question.

 

Finally, I found out that granting read access at the Basic -> Tables top node, would do the trick. There is no need to “cascade” this right down the tree, as only the top tables node is checked….

Now you can get back to granting access to that one, needed function.

This entry was posted in MS Dynamics Ax. Bookmark the permalink.

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>