- [Instructor] Let's learn how to administer user security
in Dynamics GP by understanding security tasks.
Click on Administration, Setup, System, Security Tasks.
This opens the Security Tasks Setup window.
Fortunately, Microsoft has created these tasks for you.
There are admin tasks.
There are also other tasks such as cards
which are master records, employee information.
INQ stands for inquiries.
These are read-only lookups.
Now the tasks already exist.
That's great, we don't have to create them.
The roles already exist.
Microsoft has also created those.
Notice there's an asterisk at the end of the role ID.
That lets you know it's a factory-loaded role.
Therefore, all you need to do is go to User Security
and select the company
and then just click off the roles
you want that user to have.
If the person is already in the power user role,
then it will let you know
that it doesn't need any other role
because power user is a special role
that has rights to everything in the system.
Okay, back to security tasks.
These security tasks are rather complicated.
You can't even really see what's in the guts
of one of these security tasks that easily
because you have to look through it
as far as okay it gives rights to certain windows
within the company series
and you see what is clicked is what it has given rights to.
So this was very carefully thought out by Microsoft.
And if you want to start changing it,
it could have unexpected effects.
That's why my recommendation is to use the default tasks
and the default roles.
But if you do want to create a new task,
it's because you're really trying to get it
to a very fine level of detail
of what exactly that task has rights to within the system.
So the task has one or more permissions within the system
regarding Windows and reports and files
and all of this complex stuff.
Then a security role is compromised of tasks
so a role has tasks and a task has the actual say privileges
to a window or privileges to a report.
You see how complex it is
and how it can easily become very confused
and overly complex and overly difficult to administer.
So once again,
my recommend is to use the User Security window
and to assign roles that are predefined for the most part.
You can then possibly edit a role
and eliminate or add in tasks that is better
than actually changing what is available within a task.