Expedite Security Role Testing Assignments After a Code Move in Dynamics AX

by | Updated December 29, 2017 | Dynamics AX, Security

It is common throughout an ERP migration for the need to perform many code promotions and environment refreshes to a TEST or UAT system for eventual installation to Production. Not only is testing being performed on code, data, and functionality, but security roles and settings may also require validation. This can introduce a level of complexity in your testing scenarios because the users testing the roles may not necessarily “live” them or be representative of what they have in Production.  Therefore, manual IT administration is needed after each data refresh to reassign users into their needed testing roles, as they will inherently match the system the data originated from. This can be especially problematic and time consuming if there are large numbers of people testing security roles.

There is a shortcut to addressing this however and it involves setting up your desired “testing” security role assignments in one environment, exporting them, and further importing them into the target environment. The following steps can be taken to accomplish this.

How to set up security role assignments, export, and import for testing in Dynamics AX:

In our scenario, April Meyer is an accounts payable manager at Contoso Ltd. She is working on testing the security roles for her employees, one of which includes the accounts payable clerk role.  In Production, the source of the data refresh, her security role assignments are as follows:

Security assignments in Dynamics AX

In TEST, where the security role testing will occur, she needs to have the following security role assignments in order to test and validate functionality:

Validate functionality of Security Roles in Dynamics AX

Set up security role assignment

The first step is to set up the desired security role assignment.  This should ideally be performed in an environment that closely resembles the target, such as a development system that was copied from production.  In our scenario, we are going to be performing the desired assignments in our TEST environment.

  1. Navigate to System Administration > Common > Users > Users
  2. Create your desired security role assignments for each user that will be affected.
  3. Navigate to System Administration > Common > Data export/import > Definition groups
  4. Click the New button to create a new definition group.
  5. Enter in the name “SecRoles” for the Definition group name, and a description of your liking.

Create table definition group for security roles in Dynamics AX

  1. Click the Clear button to remove any current saved parameters, and then click OK.
  2. The new definition group is now listed. Click the Select tables button.

Select tables for Security Role Definition groups

  1. In the Name of table column, find and add the SecurityUserRole Check the box marked Apply criteria and Specify related tables on the row.
  2. Click the Select related tables button:

Select related tables for security role definition groups

  1. The Select related tables form will appear. Uncheck the Select all tables in list checkbox and under the Select table relationship levels to include: section, click the < < (b) button until the level reaches 1:

Select table relationship levels for security roles

  1. You should now have a listing of three tables. Click the checkbox next to the UserInfo table and click Close.


  1. With the SecurityUserRole row selected, click the Export criteria button:

Security user role export criteria in Dynamics AX

  1. We are now going to create a query in which we select which users to export. This can be one user, or many users. In our scenario, we will click the Add button to create a new query, choose the Security user role table, with the field User ID, and the criteria of our AprilM user. If you have multiple users that you want to export, you can do so by comma-separating the users.  Click OK when done.

Create a query to select which users to import

  1. Click Close
  2. Now it is time to export our user role assignments. Click the Export to Select a save location, and change the File type to Comma, and click OK.

Export user role assignments

Export user role assignments

  1. Click OK if prompted to export or import-related tables.
  2. You’ll now find there is a .dat and a.def file created at the path you specified earlier. If you open the .dat file, you’ll find a listing of all users within AX and their associated security role mappings that we defined in our query.

Associated security role mappings

Moving into TEST

Next, we’re now assuming that our TEST environment has been refreshed from Production and we need to update the security assignments for our testing users.

  1. In the TEST Dynamics AX environment, navigate to System Administration > Common > Data export/import > Import
  2. Browse and find the .dat file we created earlier
  3. Click on the Advanced
  4. Check all three check boxes

Update security assignments for testing users

  1. Click OK. The import process will begin.
  2. When prompted with a dialog regarding selecting which tables to delete before import, check the box next to Security user role, and click OK.

Select tables to delete before import.

  1. Click Yes to continue.
  2. Click Yes when prompted to update existing data.
  3. Dynamics AX will now assign the security roles based on the file we created earlier and an Infolog will be presented when the import is complete. You can verify by opening the user options for the account to what the intended role is.

Verify security roles in the user options for the account


Related Posts

  • Here are some tips on security basics in  AX 2012 when assigning roles and working with existing duties and privileges. 1. I have a user assigned to the Product Designer security…

  • We ran into a scenario where we had to make some changes to security roles in Dynamics AX that were created in a different layer than we were currently doing development…

  • Over on the AX Support site on MSDN, Daniel Durrer has taken the time to keep tabs on the latest builds for Microsoft Dynamics AX 4.0, 2009 and 2012.  I…


Submit a Comment

Your email address will not be published. Required fields are marked *

Upcoming Events


02jun2:00 pm2:30 pmBusiness Intelligence for Batch Manufacturers

16jun10:00 am10:30 amHow AP automation can speed up month-end close in D365 Finance

17jun11:00 am12:00 pmConfab Live with Stoneridge – Real Time Marketing Strategies for Success

23jun10:00 am10:30 amThe Modern Manufacturer: Cost Accounting in D365

30jun10:00 am10:30 amAP Automation Checklist for a 2022 Rebound

30jun2:00 pm2:30 pmAchieving Success: How Technology Is Helping Nonprofits Thrive


01jul11:00 am12:00 pmConfab Live with Stoneridge – Dataverse Virtual Entities

14jul12:00 pm12:30 pmBeyond Reporting - What Business Intelligence Can Do For Your Agribusiness

14jul2:00 pm3:00 pmMastering the Production Floor

15jul11:00 am12:00 pmConfab Live with Stoneridge – Integration Strategies for End User Success

21jul10:00 am10:30 amThe Modern Manufacturer: Manufacturing Software in the Real World

21jul12:00 pm1:00 pmIs it Worth it to Upgrade to Dynamics 365 Finance and Supply Chain Management? - Everything AX Users Need to Consider

28jul2:00 pm2:30 pmConsiderations for Successful Testing Plans for Major Releases of Dynamics 365 Finance and Supply Chain Management

About Stoneridge
Stoneridge Software is a unique Microsoft Gold Partner, with emphasis on partner. With specialties in Microsoft Dynamics 365, Microsoft Dynamics AX, Microsoft Dynamics NAV, Microsoft Dynamics GP and Microsoft Dynamics CRM, we focus on attracting the most knowledgeable experts in the field to our team, and prioritize delivering stellar solutions with maximum impact for your business. At Stoneridge, we are deeply committed to your results. Each engagement is met with a dedicated team, ready to provide thorough, tailored, and expert service. Based in Minnesota, we intentionally “step into your shoes,” wherever you are. We focus on what you care about, and develop trusting, long-term relationships with our clients.

Subscribe To Our Blog

Sign up to get periodic updates on the latest posts.

Thank you for subscribing!