1. Unlocking the Dynamics AX 2012 Security Model
Mike Cassady
Fastpath

2. Agenda
Welcome
Show of hands
Security overview
Demo
Questions

3. Show of Hands Dynamics AX version Security administrators Developers
4.0
2009
2012
2012 R2
Security administrators
Developers
Upgrading

4. AX 2012 Security Model
New role based security model

5. AX 2012 Security Model
Template Roles, Duties, Privileges are delivered
Roles are system wide
Assign user access by organization (no domain)
Roles and Duties managed by Security Admins
Privileges and Permissions managed by Developers

6. AX 2012 Security Model Record level security is available
Depreciated in a future release
Replaced by Xtensible Data Security (XDS) Policies
Setup users via Active Directory Groups
Security reports – limited
No direct upgrade path from previous versions

7. Segregation of Duties Preventative control No standard rules
Analysis performed at duty level
Gaps
Security overrides
Privilege to role assignment
Security inherited via AD group

8. AX 2012 R2
Partitions
Each partition has it’s own list of authorized users.
Users are assigned a default partition
User/role assignments are per partition
Role/Duty/Privilege profiles are system wide

9. Tools Security Upgrade Advisor Tool
Security Development Tool for Microsoft Dynamics AX 2012

10. Create AX User/Assign Roles
User Account Types
Active Directory user
Active Directory group
Claims user
Assign Users to Roles
Automatic role assignment
Assignment mode
Automatic vs manual
Exclude from role
Assign organizations

11. Manage Roles/Duties/Privileges
Icons denote security container type
Role to role assignment
Privilege to role assignment
Fact boxes
Override Permissions
Field Level Security

12. AOT New security node Field level security
Role/Privilege overrides
Reports (Right click > Add-Ins > Security tools)

13. Security Development Tool
Tracing
Test workspace
Reduces need for test user accounts
Limitation – cannot open test multi-role assignment
Licensing

14. Documentation Role-based Security Use Patterns for Developers
Developing Extensible Data Security Policies
Security Roles & Licensing Whitepaper‎