NAV 2013 R2 Limited User

thegunzo

In NAV 2013 Microsoft had not finished setting up the Limited User restrictions. Has this been done in NAV 2013 R2. If so are there any white paper or blog on the functionality ?

edupont_[MSFT]

Hello Gunnar,

In Microsoft Dynamics NAV 2013 R2 we check that the user who uses a Limited User license does not go beyond the restrictions. There was supposed to be a PowerPoint in the readiness library on PartnerSource (https://mbs.microsoft.com/partnersource/marketing/campaigns/prospect/platform.htm), but it appears to be missing - I'll try to find it for you.

The short version is in the MSDN Library here: http://msdn.microsoft.com/en-us/library/jj551750(v=nav.71).aspx

We would like to know which type of further information you are looking for so that we can improve the Help content in a later release of NAV - for now, the topic on MSDN is all we have, so feel free to let me know on this thread or otherwise.

Thanks!

thegunzo

Thanks Eva

Is there any way to configure or select the three tables the given user has access to modify other then in his permissions ?

sheldonint

We seem to be running into problems with using Limited users with certain permissions applied.

We gave user with Insert/Modify rights to Sales Header/Sales Line table and set user as Limited user. But when creating a new SO, we get permission errors to add new Sales Line.

Changed the user to Full user with the same permission sets, and everything works fine.

Then changed user back to Limited user but with super rights, that works fine as well.

It looks like when applying Permission Sets to Limited users causes problems.

Anyone is having this problem as well?

Thanks!

drknw

I'm having the same problem sheldonint. Have you found a solution?

Thanks

libin80

Hi,

I have just started using NAV 2013 R2 and had the problem in knowing which tables are used by the Limited user.
But now I have found a solution. You have to install platform update Hotfix 5. (NAV 2013 R2 - Build 36281). KB ID - 2937999

It can be downloaded from https://mbs2.microsoft.com/Knowledgebas ... %3b2937999

You can find "How to install a Microsoft Dynamics NAV 2013 update rollup" in the link https://mbs2.microsoft.com/Knowledgebas ... us,2834770

After this you can see the 3 tables used by the limited user in Event Viewer. I have attached the screen shot.

But I see that, "No. Series Line" and "Page Data Personalization" are considered against the 3 tables

If anybody got over it, kindly update

Thanks
Libin D

tinoruijs

libin80 wrote:

After this you can see the 3 tables used by the limited user in Event Viewer. I have attached the screen shot.

But I see that, "No. Series Line" and "Page Data Personalization" are considered against the 3 tables

This can't be right. This is not how they described it in earlier documents that were released..
It seems it's too difficult for Microsoft to get things right the first time. Or second.

That's quick by the way. Rollup 5 already there.
And the link works now, so be quick before it fails.

tinoruijs

A conversion is needed after installing rollup 5. The servicetier can not be started without this conversion.
So first open Development Envirement and run conversion which starts when opening database.
After that the servicetier can be started again.

libin80

Yes, sorry I forgot to mention that. Thanks for mentioning it tinoruijs

After Installing the Hotfix, you will not be able start the "Microsoft Dynamics Nav Server" Service.
To get it started, you have to convert the Database using NAV 2013 R2 Developer environment.

And painfully, For now, using Limited license it is difficult for a sales person to create a sales order and release it.
I have noted the following tables that get updated during a sales order creation and the 3 table restriction is causing lot fuss. ](*,)

No. Series Line - New sales order no creation
Address ID - When address is changed in Sales header (AU & NZ localization)
Sales Header
Sales Line
Planning Assignment
Page Data Personalization
Warehouse Request - On sales order Release

I have not tested yet, but I guess Item Tracking Lines and Reservation Lines will also count against the 3 tables. :?:

And when creating customer or contact, again the promised WRITE Access tables don't have permission and count towards the 3 Write access Tables.
No Series Line - customer ID creation
Contact business relation
Contact
customer


Let me know if any of you guys, got over the problem of, "No. series line" and other extension tables, considered as one of the 3 Write Access tables.

Thanks
Libin D

tinoruijs

Would be nice to have a document edupont [MSFT].

davmac1

It looks like the limited user in its current form is only good for viewing data and time sheet entry (unless they changed that).
This unfortunately encourages people to have systems outside of NAV.
Something similar to the Employee Portal (versions 5 and 2009) would be a better option to provide limited functionality for sales and purchases.

The price of Office has stayed fairly stable for many years and it is the most profitable area Microsoft has. With its recent move to the iPad and the prior move to the cloud, it looks like they have figured out how to price it optimally for both Microsoft and the market. Maybe they could share some of their marketing wisdom with the ERP product marketing channel?

cnicola

I see some people trying to make SO entry work with Limited user.
While I was under the impression that it should be possible, from what I have read on PartnerSource Sales Header, Sales Line are not part of the exempt tables.
Has anyone figured out the definitive answer (for before or after Update 5)?

cnicola

davmac1 wrote:

It looks like the limited user in its current form is only good for viewing data and time sheet entry (unless they changed that).
This unfortunately encourages people to have systems outside of NAV.
Something similar to the Employee Portal (versions 5 and 2009) would be a better option to provide limited functionality for sales and purchases.

The price of Office has stayed fairly stable for many years and it is the most profitable area Microsoft has. With its recent move to the iPad and the prior move to the cloud, it looks like they have figured out how to price it optimally for both Microsoft and the market. Maybe they could share some of their marketing wisdom with the ERP product marketing channel?

They have not yet even figured out how to integrate current Office features like Power Pivot / Power BI and NAV so expecting higher level discussions is too much. But one can only hope.

libin80

And when creating customer or contact, again the promised WRITE Access tables don't have permission and counted towards the 3 Write access Tables.
No Series Line - customer ID creation
Contact business relation
Contact
customer


Let me know if any of you guys, got over the problem of, "No. series line" and other extension tables, considered as one of the 3 Write Access tables.

New Hotfix - 2934573 - (Build 7.1.36322) released =D>

Hot fix includes fix for below
Limited User Included tables are incorrectly counted in the number of tables that a limited user is allowed to write to for limited users with limited permissions (non-Super users).


I believe this will fix the issue. Haven't tested it yet, Will let you know if it worked after testing


Link to hotfix : https://mbs2.microsoft.com/Knowledgebase/KBDisplay.aspx?scid=kb%3bEN-US%3b2934573
But page does not load

Thanks
Libin D

davmac1

https://mbs.microsoft.com/partnersource/northamerica/deployment/downloads/hot-fixes/NAV2013R2PlatformHotfixOverview application hotfixes including limited user fix

https://mbs.microsoft.com/partnersource/northamerica/deployment/downloads/hot-fixes/NAV2013PlatformHotfixOverview platform hotfixes
You can navigate there from support.

maique00

Hi,

I follow all the updates of this post:
1. Install the rollup 5
2. Install the codefix 2934572 and 2934573.

Now i start to make some tests with a new limited user and i do not found where i can setup the 3 additional tables.
Who can help?
Many Thanks.

Jose Azevedo

Arndt_Loermann

no need to Setup
during the session MS Counts the modify. after 3 times of modify tables , the error occurs. please look at the event log. the table names will Show in the Event log modified before.

no Chance to Change that behaviour

tinoruijs

Arndt Loermann wrote:

no need to Setup
during the session MS Counts the modify. after 3 times of modify tables , the error occurs. please look at the event log. the table names will Show in the Event log modified before.

no Chance to Change that behaviour

:-k
And if you accidently let the user modify the wrong tables? Because permissions are not set right.
Does the limited user only have to log on again and modify the the right tables?
Or does the cache have to be flushed or something?

Arndt_Loermann

yes, after "wrong" modify, log off, log in and the next 3 tables can be modified.

tinoruijs

Arndt Loermann wrote:

yes, after "wrong" modify, log off, log in and the next 3 tables can be modified.

:-k
So when you don't mind logging out and in a couple times a day, using limited users for non-financial users can be enough..