How to Add Rights in Existing Role

Adding Rights in Existing Role

Go to any form and click options > security diagnostic – you can now see all the roles,
duties and privileges that have access to this form ,You can add the privilege to a duty
or a duty to a role or a role to a user from here or note down and go back to security
configuration and add from there.

For example: to add view rights to Vendor transactions, we would need to add access to
(1) Vendor form and (2) transactions. The reason for this is that it concerns two different
forms and we need to add access to both forms.

1) Go to the form Vendor> all Vendor> options > click security diagnostic.

• You can now see all the out-of-the box roles, duties and privileges that already have access to this form.
• Since we want to add view rights and also want to make sure that the user does not get too much access 
• and that the access is related,here we add (Privilege :Maintain vendors and View Vendor) 
• Note the name of this privilege.

2) How to add privileges to existing role.

  Go to System administration > security > security configuration > roles > select your role
  > select your duty > click on privileges > click: Add references and add the two privileges discovered in the
two steps above:(Privilege :Maintain vendors and View Vendor)

Now you can see the impact of assigned role

Role and Securities D365

User : Each user can be connected to one or more security roles.

Roles:The content of a role is what defines access in the application for the user. Each role contains duties.

Duty:This is a container for set of tasks that the role can execute and each duty consists of privileges.

Privileges:Each privilege is the container for a set of menu items. The exact access level 

(no access, read, update, create, correct, delete) is configuration on each menu item for each privilege 

and this configuration determines the actual access given to the role and its user.

Menu:- menu items, the privileges and security roles can also contain access to forms, tables and entities.

Create New Role :- 1. Role – 2. Duty – 3. Privilege -- 4. Menu

Privileges and Duties shows the access level granted:

Create/ Edit / Update   – Refer to access that allows edit and creation of new records.

View / Inquire – Refer to view access granted (No Edit Rights).

Process – Refers to the functions in periodic area of each module.

Maintain – Refers to access that allows edit, creation of new records as well as deletion of records.

Generate – Refers for reports / inquiries area – allows generation of reports or inquiries.

Create Role 

Go to System administration > security > security configuration > roles: click Create new. Type in the name of the role and click OK.

Create Duty

Go to System administration > security > security configuration > roles > select your role where you want to add a new duty > click Duties > create new and add reference.

Create Privilege

Go to System administration > security > security configuration > roles 

> select the role you want to add the privilege in > select the duty you want to add the privilege in > click Create new and add reference.

Select your privilege > click on the references to add the relevant reference (for example display menu items) > click add references > select the menu item and the specific properties it should have.

Access Level :- Unset, Grant, and Deny. 

Grant :- Grant means that the user has the ability to this access level for this object. 

Deny :- Deny means that the user is explicitly being denied this access. 

Unset :- Unset means you are not granting nor denying access to the object.

so if another role, duty, or privilege grants access to the object then the user will have access.

Note :- Deny access type overrides any Grants assigned to the user for this object from any role, duty, or privilege.

Publish Roles and Duty

Go to: System administration > security > security configuration > Unpublished objects

Select the security changes you want to publish and click ‘Publish selection’ or click on publish all.

Assign Roles to User

After create roles you can add to user to check how's it is working.

Go to: System administration > Users>Users select the user which you want to assign role

Production Quick View

1	Creation of production orders	Manual creation of production orders Create production orders through planned production orders in Master planning Create production orders directly from a sales order line
2	Production orders	Production groups – provide categorization for posting to the general ledger Production pools – allow production orders to be grouped for scheduling Quick overview of the status of the production order Tracking actual production costs against estimated A production order can be split into two or more orders
3	Subcontracting	Purchase of services from subcontractors Vendor delivery note Vendor account and warehouse Link sub-contractor purchase orders to the production order
4	Production Bill of Materials	Standard BOM is copied to Production order, from where it can be modified, if needed Supports Measurement formulas to calculate consumption Supports negative quantity on BOM lines to handle by-products of production
5	BOM line type Each item within a BOM can be controlled by a line-type. A given item can be handled as:	Sub-production Phantom BOM Subcontract Normal item
6	Scheduling	Production scheduling can be done forward or backward with different dates as starting points based on lead time of raw material Finite or infinite material and capacity scheduling
7	Production status A production order goes through the following steps:	Created Estimated Scheduled Released Started Report as finished Costed
8	Production status control	The production order can be rolled back and deleted if required until the costed stage
9	Financial integration	On-line updating of WIP ( items in process and work centers in process ) and actual cost to the general ledger when updated in Production
10	Production consumption	All consumption is reported through journals. Journals can be automatically generated and/or posted. Support for pre-deduct and post-deduct of item and resource consumption Scrap can be handled either as a constant or a variable
11	Multiple route versions	Can allocate more than one route attached to a particular item Approval procedure of routes Default route Routes controlled by date and/or quantity range
12	Multiple BOM versions	Can allocate more than one BOM attached to a item Approval procedure of BOMs Default BOM BOMs controlled by date and/or quantity range
13	Route complexity	Simple route (sequential) Complex route (route network) Simultaneous operations in route network Use of primary and secondary operation in a route Multiple work centers attached to the same operation Allocate a work center as a subcontractor
14	Route simplicity	Share route information between items belonging to same item group
15	Scheduling	Forwards and backwards from various dates Finite or infinite scheduling Rough cut capacity planning
16	Production release	Status between scheduled and started Control print of route card and route jobs
17	Ledger integration	Online update of WIP (items in process and work centers in process) in the general ledger when posting transactions or cost updating the production
18	Operation components	Queue time before operation Set-up time Run time Transit time Queue time after operation Overlap quantity Cost categories Control multiple resources Capacity load per operation
19	Scrap calculations	Calculate expected waste per operation as a percentage
20	Shop floor print outs	Route card Job card Print job list per work center
21	Cost tracking	Detailed tracking of cost related to resources and throughput Include work center costs in production cost estimation Ability to use automatic work center consumption when starting or finishing
22	Gantt chart	Graphical presentation of a production schedule Enables rescheduling by dragging and dropping
23	Task group	Use of alternative work canters for an operation in case of scheduling overloads Basic rules for which alternative work canters can be used
24	Bottleneck scheduling	Rescheduling can be centered on a known bottleneck
25	Job monitoring	Ability to track the setup job or the process job per operation Report resource consumption based on job number
26	Scheduling properties	Schedule operations that require the same work center setup concurrently