Recently, a question was raised about what was required to access GP Power Tools (GPPT) Administrator level features.
GP Power Tools features can be broken down into to levels or modes:
- Standard Mode or User Level features
- Advanced Mode or Administrator Level features
Standard Mode features can be used safely by all users and can be accessed once application level security is granted to the windows using the GP POWER TOOLS USER Security Role. This role should be granted to all users for all accessible companies in the system.
Standard Mode includes the following features; Manual Logging Mode, Dex.ini Settings, Resource Information, Security Profiler, Security Information, Security Log, Runtime Executer, SQL Executer, .Net Executer, Configuration Export/Import , ScreenShot, and Send Email.
Advanced Mode features are those administrator level features that could provide access to view or modify data and include scripting in multiple languages and Export/Import facilities. Advanced Mode features require the following:
- Application level security using the GP POWER TOOLS ADMIN Security Role or POWERUSER Security Role.
- SQL Server system administrator (sysadmin) or database owner (dbo) privileges to the system database and company databases.
- The Dynamics GP System Password or the GP Power Tools Administrator Password (depending on how the system is configured).
Advanced Mode features include; Automatic Debugger Mode, Dictionary Control, XML Table Export, XML Table Import, Runtime Execute, SQL Execute, .Net Execute, Configuration Maintenance, Administrator Settings, Administrator Password Setup, Dex.ini Configuration, Database Validation, and Setup Backup and Restore.
If the user does not have the elevated privileges at the SQL Server level, they will receive the “You must be logged on as a user with SQL Server system Administrator (sysadmin) or database owner (dbo) privileges to the system and company databases to access this feature.” message.
Note: The message was previously “You must logged on as a user with DBO privileges to access this feature.“, but has been updated to provide more information.
The user who will be accessing Advanced Mode or Administrator Level features does not need to be a POWERUSER, ‘sa’ or ‘DYNSA’. They just need access to the windows and to be granted elevated permissions at the SQL Server level. The permissions are required both for technical reasons and as an extra level of security to ensure that only administrator users can access Advanced Mode features.
Please note that even though the user has elevated privileges, due to their password being encrypted, they can only log in to Dynamics GP and so cannot use those privileges outside Dynamics GP.
For more information on GP Power Tools, please visit the portal:
Hope this explains everything
This article was originally posted on http://www.winthropdc.com/blog.