Keeping Dynamics GP Secure

Transcription

1 Keeping Dynamics GP Secure February 23, 2017 Charles Allen Senir Managing Cnsultant BKD Technlgies T Receive CPE Credit Participate in entire webinar Answer attendance checks & plls when they are prvided If yu are viewing this webinar in a grup Cmplete grup attendance frm with Title & date f live webinar Yur cmpany name Yur printed name, signature & address All grup attendance sheets must be submitted t training@bkd.cm within 24 hurs f live webinar Answer attendance checks & plls when they are prvided If all eligibility requirements are met, each participant will be ed their CPE certificates within 15 business days f live webinar 1

2 Intrductin Charles Allen Senir managing cnsultant Mre than 27 years f experience Micrsft MVP Agenda Intrductin Getting Started Security Rles & Tasks User Classes Accunt Level Security Field Level Security Activity Tracking Auditing Tables Using SQL Server Q&A 2

3 Getting Started Getting Started Create a system passwrd (Administratin area page >> Setup >> System >> System Passwrd) this passwrd prtects the System Setup ptins GP passwrds are encrypted they nly wrk in GP & Management Reprter GP passwrds can be set t bey passwrd cmplexity & expiratin rules (Administratin area page >> Setup >> System >> User) 3

4 Security Rles & Tasks Security Rles & Tasks 4

5 Security Rles Security Rles Cllectins f Security Tasks Assigned t users Mre than ne rle can be assigned t users Can be edited t include mre r less Security Tasks New rles can be created t fit yur needs At least 93 rles cme with GP fr U.S. cmpanies Security Tasks Security Tasks Cllectins f specific GP bjects (Windws, Reprts, SmartList bjects, Psting Permissins, Files & Other) Assigned t Security Rles Task can be assigned t multiple rles Can be edited t include mre r less bjects New tasks can be created t fit yur needs At least 601 tasks cme with GP fr U.S. cmpanies 5

6 Security Task Setup Security Task Setup Cntrls which functins in GP a task includes Use the Print buttn t get a reprt f what a task includes Click n a specific item in the Operatins area & click Print Operatin Access t see what users can use this item Where? Can be fund by ging t Security Task Setup Fund by series & type f bject Windws Reprts Files Custm Reprts Series Psting Permissins Custmizatin Tls Micrsft Dynamics GP Imprt Dcument Access Letters Navigatin Lists Service Enabled Prcedures SQL Objects 6

7 POWERUSER Users wh are assigned t POWERUSER rle can grant & change security Assign Admin_System_001* rle t enable a user t wrk with security G t Administratin area page >> Setup >> System Alternate/Mdified Frms & Reprts Can create multiple IDs User can have a different ne fr each cmpany Cntrl which versins f frms & reprts a user sees Imprtant when cnsidering mdified frms & reprts, Advanced Payrll, Prject Accunting, Manufacturing & SmartList & ISV (third-party) applicatins 7

8 Tables t Knw Table Name SY09000 SY09100 SY09200 SY10500 SY10550 SY10600 SY10700 SY10750 Usage Task Master Rle Master Alternate/Mdified Frm & Reprt Rle Assignment Master DEFAULTUSER Task ID Assignment Master Tasks Assignments Master Operatins Assignments Master DEFAULTUSER Task Assignment User Classes 8

9 User Classes Set up via Administratin area page >> Setup >> System >> User Classes Used by Field Level Security & Organizatinal Structures Accunt Level Security 9

10 Accunt Level Security Use t cntrl which accunts a user can access Wrks in these areas Transactins Inquiries GP reprts SmartLists Des NOT wrk in these areas Excel reprts SQL reprts Management Reprter Management Reprter Wrks with Legacy Prvider Des nt wrk with Data Mart 10

11 Field Level Security Field Level Security Enables yu t cntrl access t fields n windws Can be assigned t users r user classes Multiple ptins fr hw t handle fields Gd way t prevent yu frm having t mdify a windw Yu can als disable the windw 11

12 Field Level Actins Actins Yu Can Take Disable Field Passwrd Befre Passwrd After Warning Befre Lck Field Passwrd Windw Disable Windw Passwrd Frm Disable Frm Meaning Stps user frm using the field Requires user t enter a passwrd befre entering a field Requires a passwrd after entering data in a field Warning that the field cannt be accessed Yu cannt use r access a field Yu must enter a passwrd t pen the windw Yu must enter the system passwrd t pen the windw Yu must enter the crrect passwrd t pen the frm Yu must enter the system passwrd t mdify the frm Activity Tracking 12

13 Activity Tracking Pr man s auditing tl Enables yu t track when certain activities ccur Des nt track befre & after values Must be turned n prir t tracking the activity Activity Type Activity Type Lgin/Lgut Tracking Access Tracking File Tracking Prcess Tracking Psting Tracking Meaning Track wh is lgging in & ut, successfully r nt Wh is trying t pen, print & execute which windws, reprts & ther tls Wh is making changes t data What maintenance, rutines & utilities are being used Wh is psting what type f transactins 13

14 Auditing Tables Using SQL Server Auditing Tables Create triggers n tables t create recrds in audit tables based n insert, delete & update peratins Payrll Activity Tracker free utility that tracks changes t emplyee master recrd data 14

15 Questins BKD Technlgies Supprt Center Micrsft Dynamics GP Mnday Friday, 8 a.m. 5 p.m. Call Supprt Center tll-free 15

16 Stay Cnnected dynamicsgpinsights.cm Fllw us n Twitter Jin us n LinkedIn At Dynamics GP Insights yu can read articles, watch webinars & jin cnversatins View vides n YuTube Cntinuing Prfessinal Educatin (CPE) Credits BKD, LLP is registered with the Natinal Assciatin f State Bards f Accuntancy (NASBA) as a spnsr f cntinuing prfessinal educatin n the Natinal Registry f CPE Spnsrs. State bards f accuntancy have final authrity n the acceptance f individual curses fr CPE credit. Cmplaints regarding registered spnsrs may be submitted t the Natinal Registry f CPE Spnsrs thrugh its website: The infrmatin cntained in these slides is presented by prfessinals fr yur infrmatin nly. Applying specific infrmatin t yur situatin requires careful cnsideratin f facts & circumstances. Cnsult yur BKD advisr befre acting n any matters cvered herein r in these seminars. 16

17 CPE Credit CPE credit may be awarded upn verificatin f participant attendance Fr questins, cncerns r cmments regarding CPE credit, please the BKD Learning & Develpment Department at training@bkd.cm Charles Allen Senir Managing Cnsultant callen@bkd.cm 17