Best Practices for Managing Security in Dynamics AX Mike Cassady CTO Fastpath, Inc. cassady@gofastpath.com Twitter: @TheMikeCassady

Agenda Welcome Show of hands Common Security Challenges Role Based Security Implementation Plan Security Implementation Tips Security Development Tool demo Questions

Audience Dynamics AX version Security administrators AX administrators 4.0 2009 2012 RTM/R2/R3 7 Security administrators AX administrators Auditors Compliance Requirements Upgrading

Common Security Challenges Access security is low priority for the project team Everyone assigned System Administrator Security is the domain of IT/Sys Admin not BPOs Expensive customizations in place of security Process controls not part of the design No consideration of segregation of duties Dilution of ‘go-live’ security design Inability to report on current security setup

Role Based Security Implementation Identify Security Roles Group users with similar duties (i.e. AP Clerk, AR Clerk, etc.) Identify business process owners Complete Security Matrix for each role Configure roles based on Security Matrix Perform design in test environment Use Security Development Tool tracing

Role Based Security Implementation Create test users Test each role Document missing access Document unneeded access Modify role access Make changes based on testing and retest Promote security to production

Security Implementation Tips Identify role methodology (task?, job?) Review business processes Build security matrix Map duties/privileges to users Map legal entities to users Define roles based on tasks performed Use standard naming conventions Include process controls in design Identify SOD rules before designing security Perform UAT w/security in place

Security Implementation Tips Limit System Administrator role access Command buttons driven by table access (AX 2012) Aggregate role access can produce unanticipated results Design security in a non-production environment IT should not determine role access Business process owners determine role access Documentation

Security Development Tool Recording AX 2012 R2 hotfix Test workspace Reduces need for test user accounts Limitations Cannot open test multi-role assignment (Can use sub-roles) Does not work if you use AD Groups for user provisioning Licensing

Tools Security Development Tool for Microsoft Dynamics AX 2012 Information Source > Services > Design Security Upgrade Advisor Tool Information Source > Services > Upgrade http://informationsource.dynamics.com

Documentation Security Development Tool User Guide http://technet.microsoft.com/en-us/library/hh859729.aspx Dynamics AX Server Team Blog http://blogs.msdn.com/b/daxserver/

Documentation Role-based Security Use Patterns for Developers http://www.microsoft.com/en-us/download/details.aspx?id=39068 Developing Extensible Data Security Policies http://www.microsoft.com/en-us/download/details.aspx?id=3110 Security Roles & Licensing Whitepaper‎ http://download.microsoft.com/download/B/6/6/B66540B2-C8D7-4C5C-91D5-FF6760906A7B/MSDAX2012_Security_Roles_Licensing_Whitepaper.pdf http://download.microsoft.com/download/0/3/A/03A2D4A2-47A3-45E3-85A7-5F465E141F0F/MSDAX2012_SecurityRolesLicensing.PDF

Twitter: @TheMikeCassady Q/A Mike Cassady CTO Fastpath, Inc. cassady@gofastpath.com Twitter: @TheMikeCassady