Thursday, November 15, 2012

How to have different permission for the user in the different companies in AX 2009.


How to have different permission for the user in the different companies in AX 2009.

For example if we are having 2 companies i.e. ‘CEU’ and ‘CEC’ in AX 2009.So if the user-x will be having the same permissions in both companies.
Now we want to have the user to have the different permission in both the companies ‘CEU’ and ‘CEC’.
i.e. let say the user-x in the company ‘CEU’ to have permission under the module ‘Accounts Payable’ for sections ‘Journals’ and ‘Inquiries’.
For the other company ‘CEC’ to have the permission under the module ‘Accounts Payable’ for the section ‘Reports’ only.

So to achieve this we need to have the following setup to be done. Below is the step by step procedure to be followed.
Step 1: Create a new Domain id in the Axapta 2009.
In Module Administration – setup – Domains. 

Step 2: Go to ‘Company accounts’ tab in the same form, over there add the company account ‘CEC’ under the created new Domain ‘Test’ as shown in the below figure
Step 3: Now go to the user group
In Module Administration – setup – User group, open the form.
Over here select the user group for which we wanted to have different permission in 2 companies.
In this let take the user group ‘PR complete’.
Step 4: Now click on the button ‘Permission, it takes you to ‘User group Permission’ form.
Over here we can see the domain id against the User group.

Step 5:  Now select the ‘Admin’ Domain id and go to permission tab. Under the permission tab give the permission 
Step 6: Now again come back the tab ‘Overview’, select the ‘Test’ domain id and switch to the ‘permission’ tab again.
Under the Accounts Payable – give full control for ‘Reports ‘as shown in the screen shot.
Now, login with any of the user which is in the user group ‘PR complete’.
So when the user login
In the Company ‘CEU’ will be able to see the under Account Payable – ‘Journals’ and Inquiries’ and in the company ‘CEC’, Accounts Payable – ‘Reports’, ‘Journals’ and Inquiries’.

Since we didn’t any give any permission for Account Payable – ‘Journals’ and Inquiries’ under the domain ‘Test’ for ‘Journals’ and ‘Inquiries’ but still able to see in the company ‘CEC’. The reason is that in the other domain id ‘Admin’ it also contains the company account ‘CEC’ in it, so it showing up those in it.

So this is how we can different permission in the different companies by using ‘Domain id’ in the user group.