May 19, 2016 WELCOME! MICROSOFT DYNAMICS AX USER GROUP (AXUG) Oregon (Portland) Chapter Meeting Tweet today s meeting:, #AXUG<Location>, #AXUG<Topic> MEMBERSHIP HAS ITS BENEFITS 1
AGENDA AXUG News & Chapter Business Attendee Introductions and Roundtable AX Environments, Code and Security Management Jeff Butler, DBA/system administrator, Planar Systems Sherry Moran, System/Security administrator, Key Technology Inc. GG Rowe, Security administrator, Planar Systems Tweet during today s meeting:, #AXUG<Location>, #AXUG<Topic> 2
JOIN AXUG 23,000 of your Dynamics AX peers are waiting for YOU to join the Community! Connect, Learn, Share Attend one of the hundreds of live or on-demand skill building webinars Your Peers are saying Bobby Small Director of Information Systems Ouray Sportswear Get Star ted Now Enroll Online www.axug.com/join Participate in local chapter meetings for free Access some of the 200 educational events year round Collaborate: Exclusive online social community for AX users Save on AXUG Summit Registration: up to $200 discount per person The collaboration value of getting a group of people together who share a passion for a topic is priceless. AXUG consistently provides this value in a very holistically approach. Have Questions? Contact Chulaka Senanayake chulaka@axug.com AXUG Membership Manager 877-324-8880 x1510 Click to Watch Membership Video!
OCTOBER 11-14, 2016 TAMPA, FLORIDA WWW.AXUGSUMMIT.COM
October 11-14, 2016 Tampa, FL The Premier AX User-Centric Conference Count On the Advanced Pricing Discount to Save Up to $500! Register by August 1 www.axugsummit.com #CountOnSummit #AXUGSummit
October 11-14, 2016 Tampa, FL The Premier AX User-Centric Conference Whether you re a new user or a subject matter expert, make 2016 the year the community Counts On You to share your knowledge. www.axugsummit.com #CountOnSummit #AXUGSummit
LAST YEAR AT SUMMIT
BECOME A CHAPTER LEADER Be part of something great! Learn, network, and give back to your local AX community. Connect with your Chapter Leader to become involved with your local AX User Group! Facilitate meetings Solidify agenda, location & schedule Assist in finding SME s Gather feedback to continuously improve the chapter Chairperson/ Co-Chair VP of Programming Suggest topics and speakers for upcoming meetings Provide updates on AX Roadmap Assist in building the agenda Oversee chapter membership roster for VP of accuracy and completeness Membership Welcome meeting attendees, and help facilitate the event VP of Communication Communicate to members at a local level via Collaborate, social media, e- invites, etc. Assist in driving attendance 8
DISCOVER YOUR CHAPTER 1. Use the search bar: type in address, city or zip code. 2. Link to the Chapter community: Join your local chapter to receive updates about your local chapter. 3. Next meeting date: click to register! Find your chapter at www.axug.com/engage/chapter
NEXT MEETING: Date: Thursday, July 21, 2016 Thank you to our Annual Chapter Sponsors! Time: 12:00 pm 4:00 pm Place: Portland Microsoft Office Topic: Product Configurators Forum - Key Technology: product configurator - Leatherman: constraint based configurator - Biamp: Experlogix 10
SCHEDULING CHANGE! Date: Tuesday, September 13, 2016 Thank you to our Annual Chapter Sponsors! Time: 12:00 pm 4:00 pm Place: Portland Microsoft Office Topic: Planning Expert Panel Genie Engels, mcaconnect Nigel Cox, envista Evert Bos, Sikich Consulting 11
DON T FORGET THE SURVEY! You will receive a survey via email after the meeting Please provide feedback. Your opinion is valued! Be sure to include topics you would like to see covered in future meetings Thank you for coming! Thank you to our Promotional Sponsors Thank you to our AXUG Promotional Sponsors: 12
WELCOME & INTRODUCTIONS Name Company Role in Company Microsoft Dynamics AX Version Do you have AX functionality issue discuss or tip you want to share? What AX related projects do you have in process or upcoming? 13
NETWORKING BREAK See you back here in 10 minutes! Follow us on Twitter: @axug Like us on Facebook: AXUG-Microsoft Dynamics AX User Group Follow us on LinkedIn: AXUG Official Microsoft Dynamics AX User Group MEMBERSHIP HAS ITS BENEFITS 14
PLANAR DYNAMICS AX ENVIRONMENTS
KEY TECHNOLOGY DYNAMICS AX ENVIRONMENTS Sikich Development (in Denver) DEV used for internal Development, Security Development, and Analyst Testing. Also used as a troubleshooting environment for Business Systems Team Sikich delivers Model to KEY which is applied by internal resource to DEV TEST used for User Acceptance Testing (UAT) of modifications and security. Also used as a troubleshooting environment for end users and external consultants. Key Tech DEV Key Tech TEST Key Tech LIVE Analyst Tested Changes moved via Model/Project Move. Security Changes moved via a Security Project UAT Tested and Approved Changes moved via Model DB restore to LIVE which also moves any security changes. Clustered Environment 4 AOS s 2 SQL servers Key Tech Config DEV Dedicated environment for Product Configuration Development Team Key Tech TRNG Free standing environment used for special projects like new 3 rd party add-ons Key Business Systems Team 1 Developer/Technical Lead 1 Business Systems Analyst 1 Director Process Improvement Supporting 4 Locations 500 users 16
ROLE BASED SECURITY MODEL PLANAR MODEL Functional roles One custom role per function area or department Embedded standard AX roles Cloned standard AX roles and removed specific duty/privilege Updating the role, updates everyone who has that role! Lead roles Custom role for super user or manager Parameter and module settings Analyst roles Wide sweeping inquiry roles for the data analysts
PLANAR SECURITY MODEL DEVELOPMENT M A T U R I T Y ~ P R E C I S I O N Project Phase Security level Security Model Development Design Development Testing CRP-x UAT Go Live Standard roles or system administrator Custom functional roles with standard roles embedded SHOULD be using custom functional roles by now! Custom functional roles Finalized custom functional roles Security Model in place Try not to start project core team members on system administrator! Create custom functional roles and begin to tune as needed for your business processes (at Planar we ended with 40+ custom roles). If testers have an issue performing a test step, this signifies either wrong function executing step or modification to custom role needed. Track security access issues as a part of the CRP this will be a continual refinement! You may have open security issues, as a workaround grant higher access than needed. Set up security request forms for user access and process for requesting changes to roles.
ROLE BASED SECURITY MODEL KEY MODEL All User Roles System User (MS required role, not changed), System User KEY adding standard inquiry accesses and TQM User role Assigned to all users via Rules for Dynamic Assignment Functional roles One custom role per group of functions AR Clerk KEY, AR Payments Clerk KEY Tiered Roles in some areas that are additive Tiered for Functionality Sales Clerk 1 versus Sales Clerk 2 versus Sales Clerk 3 Tiered for standard user versus lead Warehouse Worker, Warehouse Super User, Warehouse Lead Cloned standard AX roles and removed and added specific duty/privileges as need for the Role Updating the role, updates everyone who has that role! Multiple Roles Assigned to Users
KEY SECURITY MODEL DEVELOPMENT U s e r I n v o l v e d T e s t i n g Project Phase Security level Security Model Development Development Testing Custom functional roles with standard MS roles copied if applicable Custom Functional Roles from DEV Create custom functional roles and begin to tune as needed for your business If testers have an issue performing a test step, this signifies either wrong function executing step or modification to custom role needed. CORE team members maintained System Admin access for fuller ability to setup scenarios. CRP-x Custom functional roles Track security access issues as a part of the CRP this will be a continual refinement! UAT Go Live Finalized custom functional roles Security Model in place and Enforced You may have open security issues, as a workaround grant higher access than desired. Enforce use of ticket process for any changes for a user or to a Role providing audit trail. Document User Role Changes with Document Handling Notes. New Users processed through HR/Payroll New User Request Process.
MICROSOFT SECURITY DEVELOPMENT TOOL msi and the install instructions: https://technet.microsoft.com/en-us/library/hh859727.aspx Overview of the tool: https://technet.microsoft.com/en-us/library/hh859728.aspx Security for access to tool: Role/Duty/Privilege - Manage role entry point permissions Menu items installed: SysSecRoleEntryPoint & SysSecRoleEntryPointDeveloper
SECURITY DEVELOPMENT TOOL Menu: System administration>setup>security>security entry point permissions 3 1 4 2 1. Navigation menu is loaded to the left 2. Load license meta data to see licensing levels for functions 3. Enter an AX security role, duty, or privilege 4. Left navigation menu updated with role s access 5. Expand menu for details 6. Highlight a specific menu item and see specific menu item details on right: Access level and effective user license Shows system user access for comparison 5 6 7
FINDING THE AOT OBJECT NAME & RELATED SECURITY 1. In the UI, from any menu - right click in grid, Personalize and Information tab: 2. In the Developer Workspace aka the AOT Add-Ins>security tools: Associated Roles, Duties, Privileges, access level
May 19, 2016 Q&A Thank you! MEMBERSHIP HAS ITS BENEFITS