Welcome! Microsoft Dynamics GP User Group (GPUG) North Carolina (Charlotte) Chapter Meeting Tweet During today’s meeting: @GPUG, #GPUGCharlotte

Tweet during today’s meeting: @GPUG, #GPUGCharlotte Agenda 9:00 – 9:15 – Welcome & Chapter Business 9:15 – 10:15 – Ins and Outs of GP Security 10:15 – 10:30 – Networking Break 10:30 – 11:30 – Make the most out of Navigation Lists 11:30 – 12:30 – Networking Lunch Tweet during today’s meeting: @GPUG, #GPUGCharlotte

Welcome & introductions Name Company Role in Company Microsoft Dynamics GP Version What version of GP are you currently using? What is the best or worst holiday present you’ve received? (Christmas, birthday, etc.) Use this slide to do an introduction roundtable with your members!

Next meeting? Thank you to our Annual Chapter Sponsors! Click here to watch Sponsorship videos Date: 06/14/2017 Time: 9:00 am Place: Tweet during today’s meeting: @GPUG, #GPUG<Location>, #GPUG<Topic>

Join GPUG Membership Feedback Connect-Learn-Share Want to know more? Attend one of the hundreds of live or on-demand skill building webinars Participate in local chapter meetings for free Access some of the 200 educational events year round Collaborate: Exclusive online social community for GP users Save on GPUG Summit Registration: up to $200 discount per person Connect-Learn-Share Want to know more? Have Questions? GPUG Contact Bob Buresh, Membership Manager 877-324-8880 x1448 bob@gpug.com Michelle Kocher Director of Operations, Information Technology, Delta Medical Systems Enroll Online … www.gpug.com/join Becoming a member of GPUG has really helped our users improve their knowledge and understanding of Dynamics GP. We have increased efficiencies in several areas as a direct result of our GPUG membership. Being active in the GPUG community has helped me develop skills both personally and professionally, allowing me to advance in my career. Talk with the attendees about the benefits of GPUG and encourage them to get more involved! Feel free to watch the video in your meeting. 30,500 of your Dynamics GP peers are waiting for YOU to join the Community!

GPUG Events 2017 Events 2018 Events SUMMIT October 16-19 AMPLIFY + March 19-21 Anaheim, CA Dynamics GP Customers Dynamics GP Partners – Sales and Marketing Roles AMPLIFY + Partner Connection SUMMIT End-user training on the latest release of Dynamics GP plus product roadmap with Microsoft; sales and marketing training for Dynamics GP Partners. August 7-10 Fargo, ND Dynamics GP Partners – Consultant and Developers reimagine + AMPLIFY reIMAGINE Dynamics GP Partner readiness training for consultants and developers. Dynamics GP Customers October 10-13 Nashville, TN Leading live-event featuring community- produced education and optimal networking opportunities. 2018 Events Dynamics GP Customers Leading live-event featuring community- produced education and optimal networking opportunities. SUMMIT October 16-19

March 20 – 22, 2017 Anaheim, California www.gpugamplify.com

Ins and Outs of GP Security Presented by Shawn Dorward – InterDyn Artis Tweet During today’s meeting: @GPUG, #GPUGCharlotte

SHAWN DORWARD Implementation Consultant GPUG Member for 6 Years! Favorite Benefit: Endless Resources (GPUG is the GP Manual!) Long Time Dynamics GP User and GPUG FAN! 17+ Years using Dynamics GP GPUG All-Star GPUG Summit Planning Committee (2014, 2015, 2016) & 2017!! GPUG Board of Advisors (2015) Carolinas Regional Chapter Leader (2012-Present)

Security for GP Related Products Learning Objective: Comprehensive review of security-related practices with Dynamics GP related applications

Session Overview Security Introduction Field Level Security Directory Accounts with GP MR Security Excel Reports SSRS Reports

Dynamics GP Application Security Overview Dynamics GP Application SA DYNSA POWERUSER ALL OTHER USERS DYNGRP Dynamics GP Security SQL Server

Dynamics GP Application Security Overview Does not look at GP Security Does not Use DYNGRP Dynamics GP Application SA DYNSA POWERUSER ALL OTHER USERS DYNGRP Dynamics GP Security SQL Server

Dynamics GP Application Security Overview Does not look at GP Security Accesses SQL via DYNGRP GP User Name does not allow SQL Access outside of GP GP Password is encrypted and not usable without the application and DYNGRP Dynamics GP Application SA DYNSA POWERUSER ALL OTHER USERS DYNGRP Dynamics GP Security SQL Server

Dynamics GP Application Security Overview Uses GP Security Accesses SQL via DYNGRP GP User Name does not allow SQL Access outside of GP GP Password is encrypted and not usable without the application and DYNGRP Dynamics GP Application SA DYNSA POWERUSER ALL OTHER USERS DYNGRP Dynamics GP Security SQL Server

Dynamics GP Application Security Overview Grants Access to Reports, Windows, and Forms Dynamics GP Application SA DYNSA POWERUSER ALL OTHER USERS DYNGRP Dynamics GP Security SQL Server

Dynamics GP Application Security Overview Access to SQL Via Application Dynamics GP Application SA DYNSA POWERUSER ALL OTHER USERS DYNGRP Dynamics GP Security SQL Server

Dynamics GP Application Security Overview Notice Power Users and other named users in GP can only access SQL via DYNGRP and the application Dynamics GP Application SA DYNSA POWERUSER ALL OTHER USERS DYNGRP Dynamics GP Security SQL Server

Field Level Security What is it? How do I use it? When shouldn’t I use it? How to Manage Security

Field Level Security Common Questions answered by FLS: Can I password a field? Can I remove or hide a field?

Field Level Security Use the Field Level Security window to restrict access to any field, window, or form. You can apply a password or make a window or form unavailable. It also allows you to hide, lock, or apply passwords to fields.

Field Level Security Field Level Security Not available? Check Registration

Dynamics GP Application How does it Fit? Dynamics GP Application SA DYNSA POWERUSER ALL OTHER USERS Field Level Security is separate from GP Security DYNGRP Dynamics GP Security SQL Server

Dynamics GP Application How does it Fit? Dynamics GP Application SA DYNSA POWERUSER ALL OTHER USERS Field Level Security is separate from GP Security

Dynamics GP Application How does it Fit? Dynamics GP Application SA DYNSA POWERUSER ALL OTHER USERS Field Level Security is separate from GP Security

Dynamics GP Application How does it Fit? Dynamics GP Application SA DYNSA POWERUSER ALL OTHER USERS Field Level Security Field Level Security Field Level Security Field Level Security is separate from GP Security

Dynamics GP Application How does it Fit? Dynamics GP Application SA DYNSA POWERUSER ALL OTHER USERS Field Level Security Field Level Security Field Level Security Field Level Security is separate from GP Security DYNGRP Dynamics GP Security SQL Server

Field Level Security – Let’s Put it to work! Company List Users Security ID List

Field Level Security Lets Remove “DELETE” button from Payables Batch

Field Level Security First – Add a new Field Security ID

Field Level Security Next Choose the Product, Form and Window

Field Level Security Choose the Security ‘Mode’

Field Level Security Setup Password ID if using Password (Why are we not able to password the delete button?)

Field Level Security Passwords can be changed or reset by a user with access to field level security Once the Field Security ID is setup, it must be assigned to user(s) and company(s).

Field Level Security

Field Level Security Click the user(s) Click the company(s) Select the ID(s) Notice Pending # Hit Apply

Field Level Security Password Before    You must enter a password before getting access to a field. Password After    You must enter a password after modifying a field for the changes to be saved. Warning Before    A warning will be displayed and access to that field will be denied. Lock Field    You can’t use or modify the field. Disable Field    The field will be displayed but it will not be available. Hide Field    The field won’t be displayed. Password Window   You must to enter a password before access to the window is permitted. Disable Window    Enter the system administrator’s password to have access to the window. Password Form    Users/classes must enter a password before access to the form is permitted. Disable Form    You must enter the system administrator’s password to modify the form.

Field Level Security Tips User must log out and back in Use in Test first Use modifier to find field ID Use ‘Print’ to generate ‘audit’ report

Dynamics GP Application Field Level Security Dynamics GP Application SA DYNSA POWERUSER ALL OTHER USERS Field Level Security Field Level Security Field Level Security Questions? DYNGRP Dynamics GP Security SQL Server

Directory Accounts with GP What is it? How do I use it? When shouldn’t I use it? How to Manage Security

Directory Accounts with GP Windows Account Select the Windows account to assign to the user ID. The Window account cannot be assigned to more than one Microsoft Dynamics GP user. This field is not available for sa and DYNSA users.

Directory Accounts with GP Web Client Only Option If this is marked, the Directory account is required! No SQL User Account created

Dynamics GP Application How does it Fit? Dynamics GP Application SA DYNSA POWERUSER ALL OTHER USERS Field Level Security Field Level Security Field Level Security DYNGRP Dynamics GP Security SQL Server

Dynamics GP Application How does it Fit? Dynamics GP Application

How does this fit? Dynamics GP Web Client SA DYNSA POWERUSER ALL OTHER USERS Field Level Security Field Level Security Field Level Security Directory Accounts Not Available Shared SQL User that is assigned DYNGRP Dynamics GP Security SQL Server

How does it Compare? Dynamics GP Web Client Only Dynamics GP Security SQL Server DYNGRP Dynamics GP Application SA DYNSA POWERUSER ALL OTHER USERS Field Level Security SA DYNSA POWERUSER ALL OTHER USERS Field Level Security Field Level Security Field Level Security Directory Account Not Available Shared SQL User that is assigned DYNGRP Dynamics GP Security SQL Server

How does it Compare? Dynamics GP Web Client Only Dynamics GP Security SQL Server DYNGRP Dynamics GP Application SA DYNSA POWERUSER ALL OTHER USERS Field Level Security SA DYNSA POWERUSER ALL OTHER USERS Field Level Security Field Level Security Field Level Security Shared SQL User that is assigned DYNGRP Dynamics GP Security SQL Server

Directory Accounts with GP If user accesses GP from thick client, GP User name is used If user accesses GP from web client, AD account is used.

Directory Accounts with GP Dynamics GP Web Client Questions? SA DYNSA POWERUSER ALL OTHER USERS Field Level Security Field Level Security Field Level Security Directory Accounts Not Available Shared SQL User that is assigned DYNGRP Dynamics GP Security SQL Server

MR Security What is it? How do I use it? When shouldn’t I use it? How to Manage Security

MR Security Connection to DB Windows Authentication? SQL User? For companies that use the data mart, security is based on the user’s Windows authentication. A separate user name and password are not required for company connection access.

MR Security Users AD Based

MR Security Groups (Not AD!) Groups are a great way to manage permissions to companies, reporting tree units and folders.

MR Security Assign new users to groups to make administering MR security much easier!

MR Security Use groups or users in Tree Security!

MR Security MR Roles

MR Security

MR Security Report Library

MR Security

How does this look? MR Application MR Application Legacy DataMart SQL Server MR Group MR Role MR Application Legacy Company Connection User Access Active Directory User Stored “Service” Account SQL Server MR Group MR Role MR Application DataMart Company Connection User Access Active Directory User Windows Authentication

Excel Reports Security What is it? How do I use it? When shouldn’t I use it? How to Manage Security

Excel Reports Security Authenticated Via AD AD Part of SQL Role Create New AD Group Assign Group access to SQL Role Copy/Paste with Connection File Share File Folder

Excel Reports Security SQL Server SQL Reporting Role Excel Reports User Access Active Directory User

SSRS Reports What is it? How do I use it? When shouldn’t I use it? How to Manage Security

SSRS Reports Remember those RPT_Roles? Use them here too! Folder Security Report Security Active Directory Groups Datasource Settings

SSRS Reports System Roles (From Reporting Services)

SSRS Reports Role Assignments (From Reporting Services) By User or Group (Both from Active Directory)

SSRS Reports Role Assignments Customize?

Reporting Service Role SSRS Reports SQL Reporting Role Reporting Service Role SSRS Reports User Access Active Directory User SQL Server

Let’s Put it all together! Dynamics GP Security SQL Server DYNGRP Dynamics GP Application SA DYNSA POWERUSER ALL OTHER USERS Field Level Security ??? Dynamics GP Security SQL Server Shared SQL User that is assigned DYNGRP Dynamics GP Web Client Only SA DYNSA POWERUSER ALL OTHER USERS Field Level Security Directory Account Not Available SQL Server SQL Reporting Role Excel Reports User Access Active Directory User SQL Reporting Role Reporting Service Role SSRS Reports User Access Active Directory User SQL Server SQL Server MR Group MR Role MR Application DataMart Company Connection User Access Active Directory User Windows Authentication SQL Server MR Group MR Role MR Application Legacy Company Connection User Access Active Directory User Stored “Service” Account

Let’s Put it all Together GP WebClient SQL Excel Reports MR SSRS Reports User Name sdorward domain\sdorward Windows Account Access to SQL DYNGRP N/A SQL rpt_ Role Service Account

Shawn Dorward @ShawnMDorward https://www.linkedin.com/in/shawnmd 9/10/2018 3:48 PM Shawn Dorward Shawn.Dorward@InterDynArtis.com @ShawnMDorward https://www.linkedin.com/in/shawnmd © 2016 Dynamic Communities. All rights reserved. DYNAMIC COMMUNITIES MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Networking Break Follow us on Twitter: @gpug Like us on Facebook: GPUG-Microsoft Dynamics GP User Group Follow us on LinkedIn: GPUG – Official Microsoft Dynamics GP User Group

Roundtable discussions – You Choose! Here are a few suggestions to get the conversation started Power BI GP 2016 SmartList PSTL

Thank you for attending our meeting, and we look forward to seeing you next time! 06/09/2017 Please provide feedback by completing the post meeting survey. Your opinion is valued!