Native Controls in Microsoft Dynamics NAV › sites › default › files › docs ›...
Transcript of Native Controls in Microsoft Dynamics NAV › sites › default › files › docs ›...
![Page 1: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/1.jpg)
Native Controls in Microsoft Dynamics NAV
Nate Boettcher, Director of Application Development
Fastpath
![Page 2: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/2.jpg)
Agenda
• Introductions• Security model• Security reporting• Administrative access• Segregation of duties• Audit trails• Workflow
![Page 3: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/3.jpg)
About Nate
• Director of Application Development at Fastpath
• 6 years experience in Software Development• 4 years experience in Microsoft Dynamics
![Page 4: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/4.jpg)
About You
• Microsoft Dynamics NAV Version• Role
– Finance– IT– Audit
![Page 5: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/5.jpg)
Security Model
• User -> Permission Set• Permission set -> Permission
– Read, Insert, Modify, Delete on Table Data• Indirect permission
– Execute on all other objects– BASIC permission set (ALL in 2009)– Per Company Access
• User credential types– Windows authentication– NAV authentication (database)– Windows groups
![Page 6: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/6.jpg)
Security Model
![Page 7: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/7.jpg)
Permission setup
![Page 8: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/8.jpg)
BASIC role (NAV 2013)
![Page 9: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/9.jpg)
Indirect Permission
• Try to post Sales Order– Includes a Delete of Sales Line record
• Security assigned to Sales Line table
![Page 10: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/10.jpg)
Indirect Permission
• Codeunit Sales-Order 80 object permissions
• Successful post
![Page 11: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/11.jpg)
Indirect Permission
• Codeunit Sales-Order 80 modified object permissions
• Error posting
![Page 12: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/12.jpg)
Security Reporting
• No standard functionality• Manual reports
– User to role access– Role to permission access
• SQL database queries• SSRS reports• Report reviews
– Who?– How Often? – Sign-off?
![Page 13: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/13.jpg)
Administrative Access
• Out of the box– SUPER– SUPER (DATA)
• First user created in Dynamics NAV is assigned SUPER
• No requirement for SUPER role• SUPER role is not programmatic – assigned
permissions• SUPER (READ) recommendation
![Page 14: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/14.jpg)
SUPER role permissions
![Page 15: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/15.jpg)
SUPER (DATA) role permissions
![Page 16: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/16.jpg)
SUPER (READ) role permissions
![Page 17: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/17.jpg)
Segregation of Duties
• No standard functionality• Methodology to follow• Rule set to identify conflicts in your system
(ISACA)• Build a custom solution, automated or manual• Manual transaction sampling
– Compare vendor changes and purchase orders• Don’t forget about process controls• Balance of process controls and system security
![Page 18: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/18.jpg)
Audit Trails
• Change Log– Activate change log– Specify table/fields to track– Per company
• Performance considerations– Validate table/field tracking every transaction
• Only tracks changes inside of Dynamics NAV• Changes at database level made by NAV Service
Account• Reporting on Audit Trail data
![Page 19: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/19.jpg)
Change Log Setup
![Page 20: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/20.jpg)
Change Log Entries
![Page 21: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/21.jpg)
Workflow
• Document approvals– Sales or purchase order
• Predefined hierarchy of approval managers with specific approval amount limits
• Approval administrator maintains the system– Substitute approvers
• Notification– E-mail notification between user and approvers– Overdue approvals
![Page 22: Native Controls in Microsoft Dynamics NAV › sites › default › files › docs › native-con… · Native Controls in Microsoft Dynamics NAV. Nate Boettcher, Director of Application](https://reader033.fdocuments.in/reader033/viewer/2022042403/5f16cc67496c714eff41664a/html5/thumbnails/22.jpg)
Approval User Setup