How To Grant a User Access to GP Security Windows

 

Who’s in charge of the GP security within your organization? Often when people try to assign that duty to someone, they get stuck giving them access to change security.

By default, Dynamics GP is designed to only allow the ‘SA’ (System Administrator) to have full access to the security windows. How do you grant someone that access under their own user ID? And, restrict their access to certain modules?

Did  you try to grant this user the “Power User” role? Nope. That won’t work. That user will have access to the security windows, but will not be able to make any changes. Depending on the security window, key fields will be greyed out.  You won’t be able to reset passwords or give users access to companies.

 

Here’s how you do it. Make sure the user has access to the right GP windows. Then make sure they are a “Security Administrator”.

Step One– Give the User Access to the Security Windows

This step is unnecessary if the user already has the “Power User” role. There is no existing Security Role that exists for this. Therefore we will need to create one.

Go to Microsoft Dynamics GP Tools- Setup- System- Security Roles

Name your Role ID (for example, “SECURITY ROLE”), and assign the default Security Task ID “ADMIN_SYSTEM_001*”.

Then assign that role to the correct user. Go to Microsoft Dynamics GP – Tools – Setup – System – User Security.  Select your user, then check mark the new security role you just created.

Step Two– Make the user a “Security Administrator”

This is the step a lot of people don’t know about. You could give the user all the security in the world, within Dynamics GP, but if that’s all you did, you’d find they have mysterious limitations to their security windows. Here’s how to fix that.

Go to the program “Microsoft SQL Server Management Studios”. Typically this program is installed on a server. You may be able to remote desktop to this server.

Once you open it up, log into it using appropriate credentials.  Sa credentials should work.

Now go to the security window for the user you are trying to grant this access to.  Note that we are not opening up a specific database.  We are going straight to the Security folder, and finding what we need there.  Find your user, right click, and select “Properties”.

 

Within the same window, you also need to go to the “User Mapping” tab, select each of your company databases one at a time, as well as the DYNAMICS database, and select the db accessadmin and db securityadmin database roles.

 

And there you have it- you have now successfully granted a user access to GP security windows!