Hi ,
We are implementing AX 2012.
We are using Active directory groups to which permissions / Roles are assigned to.
We have several environment, like Test / Preproduction / Production.
We would like to grant access to Test or Production with a dedicated group, but using a specific AD group.
for example .
I m an Accountant , I have the Role "Accountant" , so I belong to "AD_Accountant"
In order to perform my activities , I also belong to Active Directory group : AD_Production
later on , I m participating to a Testing session happening in PreProduction , so I m given the menbership "AD_PreProduction". That group would grant me the access to the AX preproduction environment.
This way we don't have to duplicate Active directory groups , to be environment specific , as all Active Directory groups are mapped to the same roles in all environment , but only another membership gives the permission to open/view the Test or Preproduction or Production environment.
We tried that by giving the "System User" permission only to the AD_production and removing it from all the other roles, but after several warning message user has normal access to the system .
Is there anyone who has implemented such method to control access to several AX environment ? Any idea how to move ahead ?
thank you