About security in the global address book

Applies To: Microsoft Dynamics AX 2012 R3, Microsoft Dynamics AX 2012 R2, Microsoft Dynamics AX 2012 Feature Pack, Microsoft Dynamics AX 2012

This topic assumes that you are familiar with the topic Global address books and address reference data.

Determining security

You can set security privileges to party records in the following ways:

• Secure by legal entity - Security privileges are based on the legal entity that a party is associated with. If you secure party records by legal entity, workers can only access the records that are associated with any legal entity that the worker has access to.

• Secure by address book - Security privileges are based on teams. With this method, only workers who are assigned to a team that has access to an address book can view the party records in that address book.

• Secure by both legal entity and address book – Security privileges are based on both legal entities and teams.

You can create address books at any time and if you choose, you can set security parameters for the address books at any time. Setting security for address books is not required in Microsoft Dynamics AX. However, if you do not restrict access by legal entity, or if security privileges are not set for an address book, all workers in your organization can view all party records. For more information about how to set up address book parameters, see Set up global address book parameters. You can use the Security policy options link in the parameters form to select whether the enforcement of security privileges for address books is based on teams, legal entities, or both.

Party record security based on legal entity

If you select Secure by legal entity in the Global address book parameters form, party record access for a worker is restricted to the legal entity that the worker has access to. When a new party record is created, if the record is not associated with a legal entity, all workers in your organization can view the party record.

The following table shows an example of two workers and the legal entities that they have access to.

In this example, User 1 can view only the party records that belong to LE1. User 2 can view the party records that belong to both LE1 and LE2.

Address book security based on teams

If you select Secure by address book in the Global address book parameters form, access to the address books is restricted by team. You must select the teams that have access to each address book. For each address book, you can set security privileges that allow or deny access to specific teams. If you grant a team privileges to an address book, all members of the team can view the records in the address book. If you do not grant a team access to an address book, the team cannot view the address book or its contents.

The following table shows an example of two teams and the address books that they have access to.

In this example, the Public sector team can view only the party records that are in the PubSC address book. The Pneumatic team can view only the party records that are in the PTJPN address book.

For more information about teams, see Manage teams.

See also

Set up global address book parameters

Create address books