Address Book, Teams and Security

1.      Option opted for – Secure by address book.

2.      When the new entity is created following things are MANUALLY done:

a.      ADDRESS BOOK created for that entity – MANUALLY

b.      TEAM created for that entity – MANUALLY

c.      ASSIGN the created TEAM to ADDRESS BOOK – MANUALLY

3.      When the following records are created, the ADDRESS BOOK is assigned to the records MANUALLY. The address book is the company in which the record is created:

a.      Customers

b.      Suppliers

c.      Trade hierarchy records

d.      Employees

4.      In standard AX, an employee is assigned to the team.

Standard AX

 

However not any user can be assigned to the team. If the user is not associated with the employee, then system throws an error.

Error

 

In standard AX, if the employees are to be added to TEAM, they should be assigned to the USER or else they cannot be selected in the ‘Add team members drop down:

When the ‘SJK SJK’ (employee) is assigned to the USER:

When the ‘SJK SJK’ (employee) is NOT assigned to the USER:

So in effect:

a.      Address Books contains Teams

b.      Teams contains Employees (Associated with Users)

c.      All the AX records (Customers, Vendors, Employees etc) are stamped with the Address Books.

d.      Teams will direct the logic about which AX records should be shown to the employees of that team.

6.      So while debugging, first step is to check the EMPLOYEE’s TEAM, ADDRESS BOOK to which the TEAM belongs and then the AX record’s ADDRESS BOOK.

EMPLOYEE’s TEAM -> ADDRESS BOOK -> ADDRESS BOOK on the AX record

If the ADDRESS BOOK on the EMPLOYEE’s TEAM = ADDRESS BOOK on the AX record, then the AX record should be seen by the EMPLOYEE.

7.      This is also controlled by whether the security roles that are assigned to the USER have access to ALL organizations or specific organizations:

Thanks

Sarang