Navigating GP Security

Navigating GP Security Presented by Victor Desveaux Tim Robinson

The Importance of Being Secure Internal vs External Functionality now, review later Proactive vs Reactive Security Plans & Processes Internal Proactive Control

Security Inside GP System Company Account User Field

GP System Security System password that gates access to system-level windows Inquiry, reports, utility, and setup windows Send Users Message Security Setup Windows In GP 2018, you are only prompted once per session Minimal access

Company Security

Account Security Enables organization-level permissions on chart of accounts Create an organizational structure Enable security on accounts Assign account access to segments of your organization

User Security Company Access Operational Access

Operational Access System-level Company-level Operations assigned to tasks Tasks assigned to roles Requires system password Company-level Roles assigned to users Requires system administrator privileged access

DEMO – Operational Access

Non-Operational GP Security Alternate/Modified Forms and Reports Report customization is ubiquitous in GP Windows can also be modified Field order when tabbing Hiding fields Assigned per company in User Security

Non-Operational GP Security Field Level Security Disable, hide, and password-protect fields & windows Not all options work for every field Assigned per user per company Can also be assigned to user classes Does not automatically propagate to new users in the class

DEMO – Field Level Security

Security Reporting Security setup reports are available Task, role, user setup Who changed this? Answer: someone with system admin credentials Custom security logging is possible

Security Outside of GP Management Reporter SQL Server Reporting Service reports Active Directory folder and report access Honest, I will let Tim speak soon!

Management Reporter

SSRS Reports

Active Directory Security Tips Clean the Domain Admins Group Use the least-privilege administrative model Create role or task-based groups Avoid breaking inheritance Have a good backup/recovery plan & test it frequently

Questions ?

THANK YOU