Archive for Mayıs, 2020

Microsoft iş çözümlerini tanıyalım. ERP, CRM, BI, AI, Bulut ve ötesi.

Microsoft iş çözümlerini tanıyalım. ERP, CRM, BI, AI, Bulut ve ötesi.

Bu yazıda size Microsoft iş çözümlerini tanıtacağım. Microsoft iş çözümlerine çok fazla yatırım yapıyor. Bunun sonucu olarak sürekli yeni bir ürün çıkıyor veya olan bir üründe isim ve içerik değişikliği olabiliyor. Bu bazen bizim için bile kafa karıştırıcı oluyor. Çok ayrıntıya girmeden aşağıdaki resimde bulunan her kutucuğu size izah etmeye çalışacağım.


Resim-1

Read more

How to Define Privileges from Dynamics 365 Finance and Operations Interface?

In this article, I will explain how to create privilege objects from Dynamics 365 Finance and Operations interface. In my previous article, I explained how fatih.test user was created. I will show an example based on this user. I deleted all roles of the user except system user. I will define a new role and grant privilege a certain object.

Image-1

You can see the menus in Image-2 only when you enter the application with the System user role.

Image-2

In this example, I will define a role that is authorized only for the All Customers form.

Image-3

First, find the name All Cutomers MenuItem. I looked it up from the development environment. You can also see it on the form. CustTableListPage

Image-4

Open your application with a user that has admin privilege and open the System Administration -> Security Configuration form. Got to the Privileges tab and click Create new. Enter the name from the window that opens and click OK.

Image-5

You must define the privilege for the privilege created. We want to authorize a Display menu Item. While on the Display menu Item record, click Add references. Filter and select CustTableListpage from the window that opens. Select Grant for all of them and click OK. We have defined the authorization.

Image-6

Go to the Duties tab and Click New. Enter a name and create.

Image-7

In order to add Privilege over the resulting Duty, we select the Privilege we created by clicking Add Reference.

Image-8

Go to the role tab and create a new role.

Image-9

Similarly, add the Duty you created previously as a reference.

Image-10

After these processes, the role privilege definition is finished. But first we need to Publish these objects.

Image-11

After publishing the privilge objects, go to your user, click Assign Roles and select the role you created from the screen that opens.

Image-12

When you log back into the system with your test user, you will see the menu you have authorized.

Image-13

In this article, I tried to explain how to create privilege objects in the simplest form through the application. Creating from the screen like this something I am not used to. I prefer to create it from the development environment. Also, objects are not created when you create them from the screen. Therefore you need to use Export-Import to move them to other environments. I will also talk about this feature. In addition, I will explain how to make privilege definitions through the development environment in my next article. Privilege is an extensive topic. I will try to talk about all the details.

Regards.

www.fatihdemirci.net

TAGs: Microsoft Life Cycle Services, LCS, Azure, Azure DevOps, Security, Microsoft Dynamics 365, MsDyn365FO, MsDyn365CE, MsDyn365, Dynamics 365 Insights Power BI, Power Automate, Power Apss, Power Virtual Agents, what is Dynamics 365, Dynamics 365 ERP, Dynamics 365 CRM

Dynamics 365 Finance and Operations Security Infrastructure?

In this article, I will try to explain the Dynamics 365 Finance and Operations security architecture. There is a docs article that I like very much, I will try to recap the topics by referencing it. It is very important to understand the security infrastructure. In today’s projects, managing security and authorization can be a very demanding process. In order to manage the needs correctly, it is necessary to know the infrastructure and the features, capabilities and constraints of security tools. In this article I will address the following topics. I did not translate them into Turkish. Sometimes there is a semantic shift, so I think explaning them is better.

•             Security architecture

•             Role-based security

•             Duties

•             Privileges

•             Permissions

•             Authentication

•             Authorization

•             Auditing

Finance and Operations application uses role-based security structure. Authorizations are given to roles, users are not directly authorized. Users are assigned roles. A user without any role has no authority in the system. The user assigned the admin role has full authorization. More precisely, they are not subject to any restrictions. Role-based security is a hierarchical structure as seen in Image-1.

Image-1

Role-based security

Role-based security has actually been created parallel to the work of business units. Role is the structure in which the necessary authorizations are gathered for a position with certain duties to fulfill those duties. The role is actually parallel to the employee’s actual job in the company. It does not mean that every employee has a role. In some cases, a single person may be managing different business processes. So they must have multiple roles. It is essential to organize roles according to the job, not the person. At least one role is required to log into the system. Generally, everyone is given the role of System User.  You can use the System administration > Users > Assign users to roles form to assign the role.

Role assignment is made by admin accounts. Basically, roles consist of Duties and Privileges.

Image-2

Duties

Duties are where the necessary authorizations are gathered to carry out a certain work process. A task can be assigned to multiple roles. Therefore, a change you make to the duty automatically affects the assigned roles. The role can be assigned directly in Privilege, but for a more manageable infrastructure, it is necessary to create and use the duties.

Image-3

Privileges

It is the structure where the authorizations required to do a certain job are gathered. For example, the payment cancellation privilege only has the authorization required to do this job. You can give this privilege directly to the role, but as I said above, it would be a better approach to collect them in duties and assign them to roles. Security and authorization objects are defined for all objects in the system. You can find and replace the ones you need and add new ones. Especially in new developments, it is absolutely necessary to create Privilege. Duty may not be required for every development. It may be enough to grant this authorization with a specific duty, but not without Privilege.

Image-4

Permissions

Permissions refers to the level of authorization to access a specific object. This can be a MenuItem or any object. Generally, authorization is given through the entry point. And these are usually MenuItems. In some cases we also use it to directly define authorization for an object of the form.

Authentication

This is my favorite feature in the new version. I can use all tools with a single email. One of them, of course, is the Finance and Operations application. To enter the application, your user login must be created. I explained it in my previous article. Usually users are expected to be in Microsoft Azure Active Directory (AAD), but you can also add external users. You can set up 2-step verification.

Authorization

Authorization controls access to the Finance and Operations application. Security permissions are used for this. Security permissions determine how certain objects of the application are accessed. These objects are: menus, menu items, action and command buttons, reports, service operations, web URL menu items, web controls and fields.

Finance and Operations application uses a context-based security, so we define the level of access to a certain object. When you associate a privilege with an entry point, you also define an access level. Such as Read, Delete, update.

Auditing

User login and logout times are recorded. You can access these records from the admin account. (System administration > Inquiries > User log).

In this article, I tried to introduce you to the security infrastructure. It is a very extensive and detailed topic. Generally, projects have a person or team responsible only for these processes. When not designed correctly, maintenance costs and problems can be annoying. It is imperative to place the due importance and test well during the project phase. Generally, since consultants have admin privileges, they can skip tests with the required roles. Here it is recommended that key users do tests with the relevant role, not as an admin. I will continue to address security-related issues.

Regards.

www.fatihdemirci.net

TAGs: Microsoft Life Cycle Services, LCS, Azure, Azure DevOps, security architecture, Microsoft Dynamics 365, MsDyn365FO, MsDyn365CE, MsDyn365, Dynamics 365 Insights Power BI, Power Automate, Power Apss, Power Virtual Agents, what is Dynamics 365, Dynamics 365 ERP, Dynamics 365 CRM

Dynamics 365 Finance and Operations Segregation of Duties Nedir?

Segregation of Duties görev ayrılığı olarak çevriliyor. Şöyle izah etmeye çalışayım. İki kritik görevi(Duty) aynı kişide toplanmasın istiyorsunuz örneğin fatura işleme ve ödeme çıkma gibi iki görevin aynı kişide olmaması gerekiyor. Binlerce kişinin çalıştığı bir firmadasınız ve bunu takip etmek belli bir aşamada mümkün olmuyor işte tam burada SoD devreye giriyor. Duty üzerinden yaptığınız bir tanım size bu tip durumlar için uyarı veriyor ve kontrol etme imkânı sağlıyor.

Önceki yazılarda kullandığımız güvenlik nesnelerini kullanarak bir örnek yapalım. Security Configuration formunu açıyoruz.

Resim-1

Read more

What is Dynamics 365 Finance and Operations Due Date Alerts?

In this article, I will try to explain what Dynamics 365 Finance and Operations Due Date Alert is and how to set it up. In my previous article I talked about Change based alerts. Some action on the data must be performed for those alerts to trigger. Here, there is no need for an action. The progress of time allows this alert to occur. Let me give you an example. For example, if you have an order and you want to be notified when the due date is over, you can set up Due Date Alert.

First, you need to set up the Due Date Alerts batch job.

Image-1

I set it up to run once a day. Usually this will be enough. I will trigger it manually once after our example. In order not to wait a day.

Image-2

Now I open the purchase orders to make a sample setup.

Image-3

Click Options->Create a custom alert.

Image-4

Here, I set it to send notifications for those which are due. I click OK to complete the alert setup.

Image-5

Now let’s create a posting with today’s due date. The batch that normally runs every day will look at them and alert. I’ll manually trigger it to show the alert.

Image-6

Warning message appears after manually triggering batch.

Image-7

In this article, I tried to explain how to create a date-based warning rule. It’s a very simple and useful feature. These features should be thoroughly explained to the end users. It is necessary to avoid additional development for jobs that can be solved with these.

Regards.

www.fatihdemirci.net

TAGs: Microsoft Life Cycle Services, LCS, Azure, Azure DevOps, Due date alerts, Microsoft Dynamics 365, MsDyn365FO, MsDyn365CE, MsDyn365

Dynamics 365 Finance and Operations Optimization Advisor Nedir?

Bu yazıda Dynamics 365 Finance and Operations Optimization Advisor ne olduğunu ve ne işe yaradığını anlatacağım. Optimization Advisor iş analisti ve danışmanların modül yapılandırmasındaki ve iş verilerindeki sorunların tespitine olanak tanıyan bir araçtır. Optimization Advisor modül yapılandırması için en iyi uygulamaları(Best practices) önerir ve eski veya yanlış kurulum ve iş verilerini belirler ve aksiyon almak için bilgi verir.

Modules > System administration > Workspaces > Optimization Advisor yolunu kullanarak çalışma alanını açıyoruz.

Resim-1

Read more

Dynamics 365 Finance and Operations Due Date Alerts Nedir?

Bu yazıda Dynamics 365 Finance and Operations Due Date Alert nedir ve nasıl ayarlanır anlatmaya çalışacağım. Bir önceki yazımda Change based alerts’ten bahsetmiştim. Orada uyarı için veride herhangi bir işlem olması gerekiyordu. Burada ise bir işlem olması gerekmiyor zamanın ilerlemesi bu uyarının oluşmasını sağlıyor. Şöyle bir örnek verelim. Örneğin bir siparişiniz var ve vade tarihi geçtiğinde uyarı almak istiyorsunuz işte tam bunun gibi durumlarda Due Date Alert kurulumu yapabilirsiniz.

Öncelikle Due Date Alerts toplu işini kurmalıyız.

Resim-1

Read more

Türkiye Dynamics 365 User Group Meetup 3

Merhaba,

Türkiye Dynamics 365 User Group etkinliklerine devam ediyoruz. Seri haline getirmeyi planladığımız Profesyonellerle Söyleşiler başlıklı 2. etkinliği bu cumartesi yapacağız. Etkinliğimizde şu anda yurt dışında 3 faklı ülkede çalışan uzman arkadaşlarımız tecrübelerini bizimle paylaşacaklar. Yurt dışı ekosistemi, iş yapış şekilleri, imkanlar ve merak edilen bir çok konunun konuşulacağı etkinliğimizi kaçırmamanızı tavsiye ederiz.

Ayrıca soru cevap kısmı da olacak.

Kommunity:

https://lnkd.in/gnkWWXz

Meetup:

https://lnkd.in/g6f7rsT

Microsoft Teams üzerinden katılmak için linki kullanabilirsiniz.

https://lnkd.in/gkQtiMW