Security privileges (form)

Article
05/05/2014

Applies To: Microsoft Dynamics AX 2012 R3, Microsoft Dynamics AX 2012 R2, Microsoft Dynamics AX 2012 Feature Pack, Microsoft Dynamics AX 2012

Click System administration > Setup > Security > Security privileges.

Use this form to create or modify security privileges, duties, and process cycles.

The security model is a hierarchy, with each element representing a different level of detail. At the top of the hierarchy are process cycles. Process cycles are composed of duties, and they represent business processes, such as the expenditure process. Duties are composed of privileges, and they represent parts of a business process, such as maintaining bank transactions. Privileges are composed of permissions, and they represent access to tasks, such as canceling payments or processing deposits. Permissions grant access to application elements, such as forms and menu items.

Both duties and privileges can be assigned to roles to grant access to the application. Process cycles are used only to organize duties and privileges. If a duty or privilege is not assigned to a process cycle, that duty or privilege is not available in the Security privileges form. To work with duties and privileges that do not appear in the form, you must use Application Object Tree (AOT).

Warning

If security is administered in multiple languages in your implementation, we recommend using the Label editor in the developer workspace to modify name and description labels. By using the Label editor, you can create labels in multiple languages.

Tasks that use this form

Create or modify a security privilege, duty, or process cycle

Navigating the form

The following tables provide descriptions for the controls in this form.

Tabs

Tab	Description
Summary	Displays the number of process cycles, duties, and privileges in the system. This information is displayed only when the top-level Process cycles node is selected in the left pane.
Details	Displays detailed information about the selected process cycle, duty, or privilege, including the AOT name, the display name, and the description. This tab is displayed when a process cycle, duty, or privilege is selected in the left pane.

Summary

Displays the number of process cycles, duties, and privileges in the system.

This information is displayed only when the top-level Process cycles node is selected in the left pane.

Details

Displays detailed information about the selected process cycle, duty, or privilege, including the AOT name, the display name, and the description.

This tab is displayed when a process cycle, duty, or privilege is selected in the left pane.

Buttons

Button	Description
New	Create a new process cycle, duty, or privilege. The type of object that is created depends on the type of object that is currently selected. For example, if a process cycle is selected, a duty will be created when you click this button. If a duty is selected, a privilege will be created when you click this button.
Delete	Delete the selected process cycle, duty, or privilege. If more than one instance of the selected duty or privilege exists, you will have the option to delete only the selected instance or all instances. If you select multiple privileges, you will see multiple confirmation dialog boxes when you select to delete. You cannot delete a duty if it contains privileges, and you cannot delete a process cycle if it contains duties. You cannot delete different types of nodes (duties and privileges, for example) at the same time. When you delete a duty or privilege, segregation of duties rules associated with that duty or privilege are disabled.
Open in new window	Open another instance of the Security privileges form with the selected process cycle, duty, or privilege as the focus. Opening another instance of the form allows you to drag and drop elements between the forms.
Add	Open the Add permissions to privilege form to select additional permissions to add to a privilege. This button is displayed only when a privilege is selected in the left pane.
Remove	Remove the selected permission from the privilege. The permission will not be deleted from the system. This button is displayed only when a privilege is selected in the left pane.
Override access level	Select the access level to be allowed by the selected permission: No access – Users will not have access to the selected element. View – Users will be able to open menus and forms and see data in tables and fields, but will not be able to add or change data. This access level does not apply to service operations or action menu items. Edit–Users will be able to change data in forms, tables, and fields. This access level does not apply to service operations, output menu items (reports), or action menu items. Create – Users will be able to create new objects, but will not be able to delete objects. This access level does not apply to service operations, output menu items (reports), or action menu items. Correction – Users will be able to modify objects that have an effective date in the past. This access level does not apply to service operations, output menu items (reports), or action menu items. Full control – Users will be able to view, create, and delete objects or items. This access level does not apply to output menu items (reports). This button is available only when a privilege is selected in the left pane.

Fields

Field	Description
Process cycles	Lists the names and descriptions of all process cycles in Microsoft Dynamics AX. This information is displayed only when the top-level Process cycles node is selected in the left pane.
Duties	When a process cycle is selected, lists the names and descriptions of all duties included in that process cycle.
Privileges	When a duty is selected, lists the names and descriptions of all privileges included in that duty.
Permissions	When a privilege is selected, lists detailed information about the permissions included in that privilege.
Operation name	If the selected privilege grants access to a service operation, this field displays the name of the service operation. This information is displayed only when a privilege is selected in the left pane.
AOT name	If you are creating a new process cycle, duty, or privilege, enter a name that will appear in the Application Object Tree (AOT). AOT names must contain only alphanumeric or underscore characters. AOT names cannot begin with a number, and they cannot contain other special characters or spaces.
Type	The type of AOT item that the privilege grants access to. For example, Menu item display or Menu item action. This information is displayed only when a privilege is selected in the left pane.
Access level	Displays the access level that is allowed by the selected permission: No access, View, Edit, Create, Correction, or Full control. This information is displayed only when a privilege is selected in the left pane.