Get problem on create new NAV user in NAV 2013 R2?

wjhorng

Dear All:
I have installed NAV 2013 R2 in 2 Server(1 for Web/NAV Server, 1 for Database).
I use NAV Windows Client logon successfully , and tried to create new NAV user.
I got the following error message
/**************
You have not been granted rights to add, modify, or delete this permission set
for this user in this company. To obtain rights, you must be granted either the SUPER or SECURITY.
*****************/ snapshot is attached.
Can anyone please help me? Thanks so much.

Jin

181deepak

when you create first user in nav - give this user super permission with company name = blank (all this comes up by default when you create first user). and may be you create first user as super with some company name and if you assign a company name then that user is super only for that particular company, so delete that company name so that the first user is have super permission for all the companies you created.

postsaurav

Hey,

I guess what Deepak suggest is right.

Things to remember when you login to a database in NAV RTC Client (2013 onwards) for first time -

1) First Create your User with Super Role with no Company Filters.
2) Then start creating other users in the database with appropriate role.

Now what you need to do is -

1) Delete all users related information from database. details for how to delete all user related information can be obtained from
below link.

http://saurav-nav.blogspot.in/2012/12/you-are-not-authorized-to-sign-in.html

Run the script from the above link in SQL Server for the Database.

2) Restart the Service.

3) Login again to Windows client and create your user as first user with Role as super and company filter as BLANK.

4) Later on start creating other users.

Let me know if you have any issues.

wjhorng

Hello postsaurav,
I following the steps, but I still can not create Web Client user logon successfully.
I am using Form authentication with AD user???? Does it anything I need to check.
Again, Thanks for your help.

postsaurav

Hi,

I am using Form authentication with AD user???? Does it anything I need to check.

I am not sure that you can use Form Based Authentication with AD User. For Using Form based authentication you need to use other credentials type. Please go through the articles in the post below.

http://saurav-nav.blogspot.in/2013/11/nav-2013-r2-windows-client-web-client.html

Let me know if any issues.

wjhorng

Hi postsaurav,
I go through the articles you provided. But when I modify NAV Service Instance Configuration value for "Certificate Thumbprint" and "Credential Type" as attachment, The instance can not be started.
Does any suggestion ? Thanks.

postsaurav

Hi,

I hope you would have followed all the steps as suggested in post.

Can you tell me the Error message from Event Viewer.

wjhorng

Hi Postsaurav:
I change instance configuration back and Run Web Client, can find the following message in event viewer.
Can you help me? Thanks.
/*****
Error accessing Website Microsoft Dynamics NAV 2013 R2 Web Client
URL: http://navcluster:8080/A0030/WebClient/Default.aspx
Type: System.InvalidOperationException
Message: UISession has been destroyed.
StackTrace:
at Microsoft.Dynamics.Framework.UI.UISession.ValidateState()
at Microsoft.Dynamics.Framework.UI.UISession.get_Attributes()
at Microsoft.Dynamics.Framework.UI.Web.UISessionInitializationFormsTracker.get_ShownForms()
at Microsoft.Dynamics.Framework.UI.Web.ShownFormTrackingUISessionInitializer.ShouldInitialize()
at Microsoft.Dynamics.Framework.UI.Web.LogicalFormInitializer.InitializeSession(FormPropertyBag formBeingInitialized, ClientSession clientSession)
at Microsoft.Dynamics.Framework.UI.Web.LogicalFormInitializer.<>c__DisplayClass1.<Create>b__0()
at Microsoft.Dynamics.Framework.UI.LogicalOperationInvoker.InvokeAndHandleExceptions(Func`1 action, IExceptionHandler exceptionHandler)
Source: Microsoft.Dynamics.Framework.UI
**************/
Best Regard,
Jin Hung

wjhorng

Hi Postsaurav:
I read your blog again. And check every steps again.
Now it works. I can use Form use Form Based Authentication with AD User.
Thanks so much for your help.

Best Regard,
Jin Hung

wjhorng

Hi Postsaurav:
Have you ever tried use PowerShell command to create NAVServerInstance, do you know how to keep space in parameters???
When I use the following command
/****
New-NAVServerInstance -ServerInstance A0031 -DatabaseName A0031 -DatabaseServer NAVLAB03 -ManagementServicesPort 8245 -ClientServicesPort 8246 -ODataServicesPort 8248 -SOAPServicesPort 8247 -ClientServicesCredentialType UserName -ServicesCertificateThumbprint "9e 4d 60 0c 4d ae 76 42 cb 40 84 a3 01 99 e7 04 94 65 ee cc"
****/
The ServicesCertificateThumbprint value space is missing as snapshot attachment. Do you know how can I keep the space?
Thanks.

Best Regard,
Jin

postsaurav

Dear Jin,

Congrats as you have completed the Form Based authentication.

For the new issue that you reported I would suggest -
"Why don't you create a instance from the Management console provided, why are you using the power shell?"

For creating instance using MMC Refer to post -
http://saurav-nav.blogspot.in/2013/11/nav-2013-r2-how-to-create-new-service.html

Let me know if you have any issues or if you want to use power shell only .

wjhorng

Dear postsaurav,
I need use the power shell to create instance because we are using multi-instances Architecture.
Each company will own independent instance.
We need use Power shell program to provide provision integration.
Thanks.

Best Regard,
Jin Hung

postsaurav

Hey Jin Hung,

I am unable to get your exact requirement.

As per my understanding you can do it easily from the MMC for creating service. I am unable to get the issue using the standard Microsoft Management Console for creating a separate service instance.

You can point to a different server, different database & different credential type using MMC too.

Please let me know the challenge in this.

wjhorng

Hi postsaurav:
MMC can use manually can not automate to integrate with customization Portal.
Is my understanding correct???
The requirement is to provide web Service interface for provision portal.
Again, Thanks.

Best Regard,
Jin Hung

postsaurav

Dear Jin Hung,

I am unable to understand the requirement..