1. Option opted for – Secure by address book.
2.
When the new entity is created following things
are MANUALLY done:
a. ADDRESS
BOOK created for that entity – MANUALLY
b. TEAM
created for that entity – MANUALLY
c. ASSIGN
the created TEAM to ADDRESS BOOK – MANUALLY
3.
When the following records are created, the
ADDRESS BOOK is assigned to the records MANUALLY. The address book is the
company in which the record is created:
a. Customers
b. Suppliers
c. Trade
hierarchy records
d. Employees
4.
In standard AX, an employee is assigned to the
team.
Standard AX
However not any user can be assigned to the team. If
the user is not associated with the employee, then system throws an error.
Error
In standard AX, if the employees are to be added to TEAM, they should be assigned to the USER or else they cannot be selected in the ‘Add team members drop down:
When the ‘SJK SJK’ (employee) is assigned to
the USER:
When the ‘SJK SJK’ (employee) is NOT assigned
to the USER:
So in effect:
a. Address
Books contains Teams
b. Teams
contains Employees (Associated with Users)
c. All
the AX records (Customers, Vendors, Employees etc) are stamped with the Address
Books.
d. Teams
will direct the logic about which AX records should be shown to the employees
of that team.
6.
So while debugging, first step is to check the EMPLOYEE’s
TEAM, ADDRESS BOOK to which the TEAM belongs and then the AX record’s ADDRESS
BOOK.
EMPLOYEE’s TEAM
-> ADDRESS BOOK -> ADDRESS BOOK on the AX record
If the ADDRESS BOOK
on the EMPLOYEE’s TEAM = ADDRESS BOOK on the AX record, then the AX record
should be seen by the EMPLOYEE.
7.
This is also controlled by whether the security
roles that are assigned to the USER have access to ALL organizations or
specific organizations:
Thanks
Sarang