Access Control from Fastpath offers the ability to easily set up your security in a compliant way from a separation of duties and licensing perspective. Once this process is completed and tested in a development instance, the next question is how to move this security to your other environments... this blog explains how to do just that.
Sometimes customers want to try and take the security models used to deploy security in a development environment and re-deploy them to other instances. Doing this though would break the ALM (application lifecycle management) story that Microsoft has developed for D365FO. We instead recommend that you treat security as code and have it follow the same promotion process that you would any custom code.
So instead of doing what is demonstrated in the graphic below, where you use Fastpath Access Control to move security to each D365FO instance:
The goal with this is that no security changes should directly be made in production just like how code changes are not done in production.
1. Migration as part of code – if all of your security changes are done via the AOT you can move your security as part of your deployable package between environments.
2. Migration using user interface changes – if you made changes to security in the user interface, these changes are not a part of code and need to be migrated manually this can be done via the Import/Export functionality within the Security Configuration area of D365FO.
3. Migration using the Security Migration solution within Fastpath Access Control – if you use Fastpath Access Control or the D365FO user interface to make your security changes, you can take the XML document generated during the export of security via the Import/Export security functionality described above and use the Security Migration tool within Fastpath to customize which changes to export, modify security labels, and what format to export the results.
Interested in learning more about how Fastpath can help manage security in Dynamics 365 Finance and Operations? Watch "Configure Compliant Security in D365FO" on-demand: