Say your asked to create a login for a few users, that basically need access to one function in Ax, but nothing else. First, you need to create a group for them, and remove all the “standard” rights under User group permissions. Our contractor also had been using creative solutions, as such I had to manually hunt down and reset the keys that weren’t created per Ms’ standards.
When you’ve removed all the permission entries defined, try starting Ax using a user that only is member of this new group. In my setup at least, I was given this error: Cannot select a record in Employee (EmplTable). Access Denied: You do not have sufficient authorization to modify data in database.
To get around this I once more had to resort to hunting down the security key in question.
Finally, I found out that granting read access at the Basic -> Tables top node, would do the trick. There is no need to “cascade” this right down the tree, as only the top tables node is checked….
Now you can get back to granting access to that one, needed function.

