Hi,
Created new user in Active Directory - test.
Created this user in AX 2012 as test.
Didn't changed any role assignment.
Looked through user and and roles mappings - user has only one role - System User
Logged into AX 2012 with this user and got full rights!
Looked in table SecurityUserRole (mapping between users and roles) - one correct record for this user.
Run method AxaptaUserManager.getRolesForUser - got 2 roles for particular user - "SystemUser" and "-SYSADMIN-"
How to remove unneeded ghost SysAdmin role from newly created user, which I can't find in Administrative interface? Any ideas?
(Deleted user from AX and created again - didn't helped).