Logo
Windows XP
Windows Vista
Windows 7
Windows Azure
Windows Server
Windows Phone
EPL Standings
 
 
Windows Server

Microsoft Dynamic GP 2010 : Protecting Dynamics GP with key security settings

1/11/2013 3:38:04 PM

Security is an important part of any ERP system and Dynamics GP provides a robust security model that rolls up individual item access into tasks and tasks into roles. Roles can then be applied to individual users, providing fine grain control of security with minimal work after the initial setup.

While the setup and maintenance of security in Dynamics GP could fill a book by itself, there are a couple of critical settings that every administrator needs to be aware of.

Dynamics GP security contains a master switch that turns all security on or off. The original purpose of this switch was to allow setup and testing of the system while security was still being configured. Then, like Chevy Chase's Christmas lights in the movie National Lampoon's Christmas Vacation, a master switch could be flipped and security would be active. As Dynamics GP has matured it has become easier to add users to a Power User role, giving them access to everything in the system during setup and testing while leaving security active. The master security switch still remains and administrators need to ensure that it is on.

Located below the security master switch is an Account Security switch. Often users think that if security is on, turning on account security must mean more security. What account security does is it limits access to accounts based on an organizational structure that needs to be set up first. If an organization structure is not set up all users are denied access to the chart of accounts and it appears that the chart of accounts has been deleted. Few checkboxes in Dynamics GP can induce the stomach-dropping fear that comes with inadvertently selecting the Account Security checkbox. This is easily one of the most panicky support calls I see and certainly it is the one with the easiest fix.

Setting up security and account security aren't recipes, they are more like Thanksgiving dinners. For this recipe, we'll trim it down to a snack and show how to ensure that security is on and account security is off.

How to do it...

To activate security and deactivate account security in Dynamics GP:

  1. 1. Select Administration from the Navigation Pane. Select Company under the Setup and Company headers on the Administration Area Page.

  2. 2. Select the Security checkbox on the lower right to activate security. If it is already marked, security is on; congratulations!

  1. 3. Below that is the Account Security checkbox. Simply deselect the checkbox to ensure that account security is off.

How it works...

These are two very basic settings that often trip up administrators. It's maddening to see a very detailed security model with a lot of work put into it and then find the Security checkbox deselected. Don't even think about the effect on an administrator's career if an auditor finds this checkbox deselected. It's also career limiting to have the CFO asking where the chart of accounts has disappeared to because someone accidently turned on account security. Don't misunderstand, account security is a great feature; it's just not one that should be turned on lightly.

There's more...

Given the power of these checkboxes, access to them should be secured as well. For complicated security setups and additional security features consider third-party solutions.

Security for Security

The Security and Account Security checkboxes are powerful. Once they are set up correctly, it is important that security be restricted to the Company Setup window to prevent a user from disabling security entirely by simply deselecting a checkbox.

Security Solutions
There are several third-party solutions that build on Dynamics GP security making security management easier and adding additional features. For example, FastPath's Config AD product synchronizes user passwords with Windows Active Directory passwords to allow multiple single sign on options. Additionally, Config AD provides an interface outside of Dynamics GP to assign security roles to users. This allows a central security manager to assign Dynamics GP security to users without using up a Dynamics GP license or providing excessive access to the security manager. 
Other -----------------
- Working with the Windows Home Server Registry : Finding Registry Entries
- Working with the Windows Home Server Registry : Working with Registry Entries - Changing the Value of a Registry Entry
- SharePoint 2010 : Packaging and Deployment Model - Site Definitions
- SharePoint 2010 : Packaging and Deployment Model - Features (part 3) - Upgrading Features
- SharePoint 2010 : Packaging and Deployment Model - Features (part 2) - Feature Receivers
- SharePoint 2010 : Packaging and Deployment Model - Features (part 1) - Feature Designer
- SharePoint 2010 : Packaging and Deployment Model - Working with Packages
- Microsoft Content Management Server Development : Validating the HtmlPlaceholderControl (part 3) - Building the Required HTML Placeholder Validator
- Microsoft Content Management Server Development : Validating the HtmlPlaceholderControl (part 2) - Checking for an Empty HtmlPlaceholderControl
- Microsoft Content Management Server Development : Validating the HtmlPlaceholderControl (part 1) - Retrieving the Current Value of the HtmlPlaceholderControl
- Windows Server 2003 on HP ProLiant Servers : Migration Case Studies (part 3) - Hewlett-Packard Company
- Windows Server 2003 on HP ProLiant Servers : Migration Case Studies (part 2) - Eastman Chemical Company
- Windows Server 2003 on HP ProLiant Servers : Migration Case Studies (part 1) - County Government Office
- System Center Configuration Manager 2007 : Network Design - Troubleshooting Configuration Manager Network Issues (part 2) - Identifying Network Issues Affecting Configuration Manager
- System Center Configuration Manager 2007 : Network Design - Troubleshooting Configuration Manager Network Issues (part 1)
- System Center Configuration Manager 2007 : Network Design - Network Discovery
- Exchange Server 2007 : Deploying a Cluster Continuous Replication Mailbox Cluster (part 2)
- Exchange Server 2007 : Deploying a Cluster Continuous Replication Mailbox Cluster (part 1)
- Microsoft Dynamic AX 2009 : Report Customization (part 2) - Adding Promotional Materials to an Invoice Report
- Microsoft Dynamic AX 2009 : Report Customization (part 1) - Creating Promotional Materials
 
 
Most view of day
- Windows Server 2008 R2 high-availability and recovery features : Installing and Administering Failover Clustering (part 4) - Verifying cluster configuration using the Cluster Validation Wizard
- Backup and Restore of Microsoft Lync Server 2010 : Backup Processes (part 1) - Backing Up Lync Server Databases
- Windows Server 2003 on HP ProLiant Servers : Logical Structure Design (part 5) - Trust Definitions
- Windows Server 2003 on HP ProLiant Servers : Assessment of the Enterprise - The Assessment Team
- Windows Phone 8 : Configuring Basic Device Settings - Wi-Fi Networking (part 2) - Removing Known Networks
- Windows Phone 8 : Working with the Windows Phone Software (part 5) - Using the Photo Interface
- Using Voice and Sounds : Associating a Sound with an Event, Using Alternatives to Sound
- Windows Phone 8 : Orientation and the PhoneApplicationPage Class (part 5) - Animating the Entire Page When Orientation Changes
- Windows Server 2012 : DHCP,IPv6 and IPAM - Exploring DHCP (part 2) - Installing DHCP Server and Server Tools
- Microsoft Visio 2010 : Formatting Individual Shapes (part 2) - Curing Menu Cascade-itis
Top 10
- Windows Server 2012 : DHCP,IPv6 and IPAM - Exploring DHCP (part 3) - Creating IPv4 DHCP Scopes
- Windows Server 2012 : DHCP,IPv6 and IPAM - Exploring DHCP (part 2) - Installing DHCP Server and Server Tools
- Windows Server 2012 : DHCP,IPv6 and IPAM - Exploring DHCP (part 1)
- Windows Server 2012 : DHCP,IPv6 and IPAM - Understanding the Components of an Enterprise Network
- Microsoft OneNote 2010 : Using the Research and Translate Tools (part 3) - Translating Text with the Mini Translator
- Microsoft OneNote 2010 : Using the Research and Translate Tools (part 2) - Translating a Word or Phrase with the Research Pane
- Microsoft OneNote 2010 : Using the Research and Translate Tools (part 1) - Setting Options for the Research Task Pane, Searching with the Research Task Pane
- Microsoft OneNote 2010 : Doing Research with Linked Notes (part 2) - Ending a Linked Notes Session, Viewing Linked Notes
- Microsoft OneNote 2010 : Doing Research with Linked Notes (part 1) - Beginning a Linked Notes Session
- Microsoft OneNote 2010 : Doing Research with Side Notes (part 3) - Moving Side Notes to Your Existing Notes
 
 
Windows XP
Windows Vista
Windows 7
Windows Azure
Windows Server
Windows Phone
2015 Camaro