Understanding the user request workflow

This describes the process where a user is requested, often by HR, and submitted to a workflow, designed to follow your organization's policies for creating a new user.

Getting ready

t is common for there to be many more employees than there are active users in the system. From time-to-time, Human Resources may request that an employee be given access to AX.

They do this using the user request feature.

How to do it…

The user request will be created by HR from the Employee or Workers list page by navigating to Human Resources | Common | Workers | Workers and by performing the following steps:

  1. On this form, in the top ribbon, navigate to User requests | Worker user request. The minimum is already filled in for you.
  2. Enter the e-mail address, if known. This can be used by the workflow to send them an e-mail when the account is created.
  3. Enter the role, if known. This can be assigned later, and even dynamically based on the employee's information.
  4. If you know the employee's Windows login details, enter them here as Domainusername.
  5. Press Ctrl + S, which saves the record enabling the Submit button as shown in the following screenshot:
    How to do it…
  6. Click on Submit and then click on Close. This opens the workflow submission form.
  7. Enter any special details about this request and click on Submit.

    Note

    Note that the User alias field (which is optional, but required for automatic user creation) is the format of DomainAccount. If you specify an invalid account, AX will still create the account, but will mark it as disabled until it is corrected.

  8. Click on Close.

Requests can be seen and monitored by navigating to System administration | Common | Users | User request.

Note

If you close the form without submitting, you can find it here and submit the user request to the workflow.

Once the workflow is completed (which can be automatic under certain conditions), the user will be created and attached to the correct security role.

Tip

If you have configured the allocation of roles to be automatic, the whole process of role allocation and user request can be largely automated (still maintaining compliance) based on the employee's position in the company.

How it works…

The user request process is intended to segregate roles between the requestor (HR, supplier via SharePoint user provisioning, and so on) and those authorized to create users.

The process relies on a workflow being created that can be configured to either prompt the appropriate user to perform the task or complete the task automatically.

This is a very powerful feature and highlights the need to have roles carefully assigned, avoiding potential security vulnerabilities, such as allowing a user to change their position, can potentially grant them system administrator rights if the automatic role assignment is used.

This should not deter you from using these features as there are significant benefits, especially in large organizations.

See also

  • An example of a user request workflow is detailed in Chapter 11, Setting Up and Managing Reports and BI.
..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
3.129.195.215