Stage - Update Permission
Introduction
You can set up restrictions that determine which stages a user is allowed to use on a request. When you've set up restricted stage movement for users they can only select the stages allowed for requests in Enterprise asset management.
Overview
In standard Enterprise asset management, you set up stages for Requests. Refer to the link to see how to work with the standard setup of stages in Enterprise asset management.
Stages determine the stages a request can go through, for example 'New', 'In progress', 'Rejected' and 'Finished'.
Define user permissions
You can set up restrictions for stages for selected users/user groups and workers/worker groups regarding which stages they are able to use.
Example: On a request, available stages for a 'New' request are 'In progress', 'Rejected' and 'Finished'. You can create a setup for each user/user group or worker/worker group allowing them to be able to select only 'In progress' and 'Finished' when they work on a request.
Stage Permissions
Restrictions regarding the use of stages are set up in an update permission form. For each user/user group or worker/worker group, a line is created for a request and permitted stages for that user or group is selected.
Refer to Microsoft documentation to learn more about the setup of users and user groups in the System administration module in D365FO:
- Create new users - Finance & Operations | Dynamics 365 | Microsoft Docs
- Security architecture - Finance & Operations | Dynamics 365 | Microsoft Docs
- Role-based security - Finance & Operations | Dynamics 365 | Microsoft Docs
Refer to the test case below for a step-by-step procedure on how to set up stage update permissions.
The screenshot below shows an example of the Stage update permission form. The available stage types are highlighted in the red box to the left. On the Permission stages FastTab, the allowed request stages selected for the user group 'Manager' are highlighted.
- In the Stage type drop-down to the left, you can filter permissions by stage to choose request stages.
- When you select a permission on the Permission stages FastTab, the selection in the Permission owner field is shown as a link. You can select that link to open the user/user group or worker/worker group setup.
Set up Stage Update Permissions
Data Requirements
- Users and user groups have been set up in the System administration module in D365FO.
- Users are assigned the relevant security roles in D365FO, allowing them to make stage updates.
Steps 9
Select Enterprise asset management > Setup > Stage update permission.
Select New.
In the General FastTab, select Request stages type.
In the Permission owner type field, select either User, User group, worker, or worker group, depending on who you're creating the update permission for.
In the Permission owner field, select the user/user group or worker/worker group that the update permission setup should be available for.
Select Save to update the screen and show the available stages on the Permission stages FastTab.
On the Permission stages FastTab > Stages remaining section, select the stages that should be available for the selected user/user group or worker/worker group. Press the 'Ctrl' button during selection to multi-select.
Select the right-arrow button to move your selection to the Stages selected section.
Optional: To remove permissions for a selected permission setup, select the stages to be removed in the Stages selected section, then select the left-arrow button.
Expected
The user can create a stage update permission record for a selected user/user group, or worker/worker group regarding request stages.
Integration and Usage
When you've completed setup regarding permissions for stage updates in Enterprise asset management, the selected users are able to only select the stages available according to that setup.
Note: If some users are not set up with specific stage update permissions, they are able to select all stages available, according to your standard setup in Enterprise asset management.
The permission setup uses the standard setup created for stage groups for Requests in Enterprise asset management.
For each stage in a stage group, you determine which stages should be available as the next possible stage. That, in combination with any user permission setup, determines which stages are available to a user. If a user/worker is part of two or more user groups/worker groups and updates a stage, the user will have access to all permissions specified in all of the groups.
Example: A request is created and currently in request stage 'InProgress'. The request stage group setup allows for three possible updates from stage 'InProgress' (refer to screenshot 'Screen 01' below). A maintenance manager who is working on a request is included in the request stage permission setup created for the group 'Manager' (refer to screenshot 'Screen 02' below). When the maintenance manager selects Request stage on the request, he or she is only able to select either 'Finished' or 'Rejected' as the next stage (refer to screenshot 'Screen 03' below). The stage 'New' can't be selected as that stage is not part of the permissions for the user group 'Manager' which is why that stage is greyed out.
In the case when a user belongs to for instance two worker groups, eg. Electricians and Mechanics, the user will have permission to update the stage based off the permissions that are specified for the Electricians group and the Mechanics group.
