eXtensible Data Security (XDS) in Microsoft Dynamics AX and Dynamics 365 for Finance and Operations

October 11 2018

The role-based security architecture introduced in Microsoft Dynamics AX 2012 fascinated me when I got involved in pre-releases. The focus from Microsoft was, in my opinion, an attempt to make a more robust and agile security platform for the application.

Introducing the roles, duties, and privileges forced us to look differently at implementations and the way we were used to doing customizations. Previously, the security was done by a consultant based on data entry. But now it needed to be designed as part of a customization or else problems would arise. For example, failing to use the new architecture could result in a normal user (without system administrator rights) not seeing new menu items.

Microsoft also introduced a new framework that is more powerful compared to the Record Level Security (RLS) which was the only option in Microsoft Dynamics AX 2009.

About André Arnaud de Calavon

André Arnaud de Calavon is a Solution Architect with over 22 years of experience in the software industry. He started his career with Navision Financials, now known as Microsoft Dynamics NAV/Microsoft Dynamics 365 Business Central. Since the year 2001, he has been working with the Dynamics AX solution. Next to consulting and training skills, he also has good understanding of development and other technical aspects. For the last two years, his main focus is on Microsoft Dynamics 365 for Finance and Operations.

Since 2012, he has worked for Kaya Consulting in the Netherlands, where he helped founding new business units. He likes complex challenges and troubleshooting. "If you can dream it, you can do it!".

In October 2013, André was awarded as Microsoft Dynamics AX MVP. This was extended consecutively, and he got his fifth MVP award last July on "Microsoft Business Applications - Dynamics 365". 

More about André Arnaud de Calavon


DimanC's picture

Hello, André
I've heard about XDS (and it's predecessors) multiple times, but finally I'm in project where's a real need to apply it. I manage basic concepts and also have some working example. But to my surprise, XDS is NOT applied to data management entities (as per 8.0 PU15) Are you aware of this fact? I'd be glad to read some comment from you (I doubt if MS would do it :D ). Any workarounds/suggestions? I see little point to invest my time to limit what users see in forms, if they have option to see ALL data in Excel (using "Open in Excel" / data entities). Thank you!

AndréAdC's picture

Hello Atis,

Thanks for reading the blog and your question. Data entities are using views to read and write data. Have you tried to include the view belonging to that entity as constrained table?