Permissions

A few days ago I’ve wrote about new possibilities in using of Limited Users in NAV 2016. I think this is big improvement, because we can use limited users for much more roles.

But I got a few comments about configuration limited users. OK, you can configure users as limited and this is all. Nothing more.

But people wants to configure what three additional application tables these limited users can use. Base on the standard NAV, this is not possible. These users get write access to a maximum of three application tables in the object range 0 – 99,999,999 other than the General Ledger Entry table. But system will count the first three used application tables beside the default tables. This is counted by the session. That means, users can use different three application tables in different sessions.

Some of administrators still want to limit these users on some specific tables. There is not feature for this requirement, but it can be made using User Permission Sets. We can create one permission set with all read permission on all tables (or less if you want this). Then, we can configure additional permission set with all permissions (insert, modify, delete) on our default 151 application tables. And on the end we can configure specific permission set based on our requirements for three additional tables.

Every time when we want to configure new limited user, we just need to add him these first two permission sets and one specific for him (or his role). In this case this limited user will have read permission to all tables and all other permissions to default tables and three we added to him. In this case, his three application tables will not depends of his first usage in session.

This is not some specific feature, but it is useful work around solution for configuration.

In older NAV versions, every time we needed more permissions sets then we already have in NAV, we have had a problem. It was not so easy and we had to be careful with this process. There was no some automatic tool for permissions recording. Now, we got it.

If we need more permissions sets, we can make them manually as earlier. But now we can use new automatic tool as well. This tool for recording permissions is based on the code coverage functionality. We can do more different activities on NAV and it will be recorded.

We just need to create a new Permission Set and choose Permissions. We need to click Start button and then we have to work all activities this role need to do. For example, open Sales Orders, create new, and create new Customer and new Item. When you finish with activities, click Stop button on Permissions and system will fill your page with all user rights. System will add only tables you used with Read permission; you have to add other permissions you need (Insert, Modify, Delete).

If you have forget some activities, you can do it again and after you click Yes on question “Do you want to add the recorded permissions?”, you will get add new rights.

This is really useful feature. Maybe we could use some of similar solutions, but now we have it in standard NAV.

Totovic Dynamics 365 Blog

How to Configure Limited Users in NAV?

Automatic Recording Permissions in NAV 2016