1. Best Practices for Managing Security in Dynamics AX
Mike Cassady
CTO
Fastpath, Inc.

2. Agenda Welcome Show of hands Common Security Challenges
Role Based Security Implementation Plan
Security Implementation Tips
Security Development Tool demo
Questions

3. Audience Dynamics AX version Security administrators AX administrators
4.0
2009
2012 RTM/R2/R3 7
Security administrators
AX administrators
Auditors
Compliance Requirements
Upgrading

4. Common Security Challenges
Access security is low priority for the project team
Everyone assigned System Administrator
Security is the domain of IT/Sys Admin not BPOs
Expensive customizations in place of security
Process controls not part of the design
No consideration of segregation of duties
Dilution of ‘go-live’ security design
Inability to report on current security setup

5. Role Based Security Implementation
Identify Security Roles
Group users with similar duties (i.e. AP Clerk, AR Clerk, etc.)
Identify business process owners
Complete Security Matrix for each role
Configure roles based on Security Matrix
Perform design in test environment
Use Security Development Tool tracing

6. Role Based Security Implementation
Create test users
Test each role
Document missing access
Document unneeded access
Modify role access
Make changes based on testing and retest
Promote security to production

7. Security Implementation Tips
Identify role methodology (task?, job?)
Review business processes
Build security matrix
Map duties/privileges to users
Map legal entities to users
Define roles based on tasks performed
Use standard naming conventions
Include process controls in design
Identify SOD rules before designing security
Perform UAT w/security in place

8. Security Implementation Tips
Limit System Administrator role access
Command buttons driven by table access (AX 2012)
Aggregate role access can produce unanticipated results
Design security in a non-production environment
IT should not determine role access
Business process owners determine role access
Documentation

9. Security Development Tool
Recording
AX 2012 R2 hotfix
Test workspace
Reduces need for test user accounts
Limitations
Cannot open test multi-role assignment (Can use sub-roles)
Does not work if you use AD Groups for user provisioning
Licensing

10. Tools Security Development Tool for Microsoft Dynamics AX 2012
Information Source > Services > Design
Security Upgrade Advisor Tool
Information Source > Services > Upgrade

11. Documentation Security Development Tool User Guide
Dynamics AX Server Team Blog

12. Documentation Role-based Security Use Patterns for Developers
Developing Extensible Data Security Policies
Security Roles & Licensing Whitepaper‎

13. Twitter: @TheMikeCassady
Q/A
Mike Cassady
CTO
Fastpath, Inc.