The Authorization Box was updated on December 21. Below you will find the changes in this release:
Name of Analysis Result is not complete for source type Organization Roles
When reviewing multiple Analysis Results for Critical Permissions, the column Name now shows the same values as on the Critical Permissions page (Chart - Department - Role), instead of only the Organization role name.
Show the Objects from the Expanded Permissions table for Permissions Sets of scope Tenant
We now show the effective permissions of a Permission Set of scope Tenant, so that you get the same kind of overview of the permissions as for the Permission Sets of scope System.
The Authorization Box was updated on December 5. Below you will find the changes in this release:
• User sync ends in technical error on NAV2013R2
• Sync tasks don't automatically start when the last sync ended in an error
• It was not possible anymore to select all Analysis Results with the "select all" checkbox on the "Analysis Results Critical Permissions" page
• Check for revoking SUPER permissions from a connection user doesn't work for an OAuth connection
• Company Group status is not automatically set to "Processed" when you import a new Company Group
• Changes to permissions that have not yet been processed, are used as part of the Monitoring Analysis Results
• Description in Changelog entries amended for changing the department of an organization role.
• Company Group is required when editing a Pre or Post Action
The Authorization Box was updated on November 21. Below you will find the changes in this release:
Add pagination to Databases overview on the Customer Details page
Pagination is added to the Databases data table, this way there is a better overview of the setup data.
Add "Select All" and "Deselect All" buttons to the dropdownlist for the selected databases of a User
There is now an easy way to select or deselect all databases when granting a user access to databases.
The Authorization Box was updated on November 8. Below you will find the changes in this release:
Pre and Post Actions are also triggered when Users are manually synced from the User page or the Database page.
Pre and Post Actions are also triggered when Users are manually synced from the User page or the Database page (the "Synchronize all" options).
Solved bugs
The Authorization Box was updated on October 31. Below you will find the changes in this release:
Hotfix for error when starting Full synchronization monitoring
A hotfix has been released as a manually started Full synchronization monitoring task kept on going into an error.
The Authorization Box was updated on October 26. Below you will find the changes in this release:
Organization Chart applicable for only the selected child connections
When you edit an Organization Chart for a parent connection, you can specify if an Organization Chart is applicable for all children or for specific children. When an Organization Chart is applicable for specific children, the Organization Chart and its Roles are now only visible for the specified child connections.
Backup of Free Fields does not support the "Use BC table to select data" fields
The backup now supports the "Use BC table to select data" fields from the Free Fields setup, to make it easy to use the backup and restore the complete Free Fields setup to another environment.
User Sync should be completed when it was processed with a warning message
To indicate the user that the User sync was processed with warnings, an orange badge component is displayed to indicate that there is a warning message. The process however is not influenced by this warning.
Free Fields of an Organization Role are added to the Authorization Request API
The Free Fields of an Organization Role can now be added to the Authorization Request API.
The Authorization Box was updated on September 28. Below you will find the changes in this release:
Note in an Authorization Request now shows multiple lines
In a note of an Authorization Request now text with multiple lines will be shown as multiple lines and not as one single text line.
The Authorization Box was updated on September 13. Below you will find the changes in this release:
Don't overwrite the value of the Approver and the Substitute in BC when the values are empty in the Approval Template (UT)
You will now be able to assign the values of the Approval User Setup fields "Approver" and "Substitute" from within BC and not from within AB.
Search on Source Type for Analysis Results of Conflicting Permissions
It is now possible to filter the Analysis Results of Conflicting Permissions by searching for a specific Source Type. This way it is easier to review the Analysis Results of a specific Source Type.
The Authorization Box was updated on August 29, 2023. Below you will find the changes in this release:
Add the Free Fields of an Organization Role to the Authorization Request API (UT)
The Free Fields of an Organization Role are added to the Authorization Request API.
Changed the password policy, so not 6 but 12 characters are required
The current password policy of AB required only 6 characters. This is changed to 12 characters. All other password requirements stay the same. (at least one digit, one capital and one punctuation mark)
The Authorization Box was updated on August 25, 2023.
The nightly syncs went into an error, which resulted in a very poor performance in the morning, especially when trying to open or edit organization roles.
The Authorization Box was updated on August 16, 2023. Below you will find the changes in this release:
Added a Permissions column to the Permission Sets data grid of the Object Explorer
A Permissions column is added to the Permission Sets data grid of the Object Explorer. You do not need to open that object to see the permissions for that object.
Profile ID shows too much information and more profiles then are visible in Business Central
The profiles visible in the Authorization Box are the same that are enabled in Business Central and have the same description as in Business Central.
Add free fields organization role to backup (UT)
Default values of free fields on organization roles can be filled with the backup functionality.
Use default free field values on import org role per user (UT)
Default settings for free values on organization roles are automatically used for new organization roles per user with an import of the organization roles per user via the organization chart.
The Authorization Box was updated on July 31, 2023. Below you will find the changes in this release:
Maintain Free Field values per Organization Role
The values for the Free Fields of an Organization role are maintained and visible in an Authorization Request.
Show free fields only when needed when adding organization role
When adding an Organization Role to a user, only the Free Fields which are needed are shown.
Create an Authorization Box user when you import User Data or Integration Data from the Organization Chart
When you import User data or User integration data of a user who is not yet activated in the Authorization Box, and you use the import function of the Organization chart, this user will automatically be activated.
This means you will have to make sure that you only import the user you would like to activate in the Authorization Box and of whom you wish to add some data.
If you use this import function and the import document consists of more users who were not yet activated in the Authorization Box, these too will automatically be activated in the Authorization Box even though no changes were made for those users.
Performance issues with exporting the Organization Structure from the Organization Chart
The Authorization Box was updated on July 19, 2023. Below you will find the changes in this release:
Create an Azure AD user directly from Authorization Box
An Azure AD user can now be created directly from the Authorization Box by filling in the Authentication Email field.
Default setup for Synchronization Tasks
There is a default setup for Synchronization Tasks based on the Business Central version of the Database Connection created. This concerns the Continuous Monitoring and Full synchronization monitoring tasks
The Authorization Box was updated on July 7, 2023.
When trying to open the Users page, this resulted in a time-out error. This should now be solved.
The Authorization Box was updated on July 3, 2023. Below you will find the changes in this release:
Being able to create one (or more) fully filled authorization request(s) in Authorization Box via an API
Being able to create one (or more) fully filled authorization request(s) in Authorization Box via an API so that the hiring and outsourcing process can be automated via Identity and Access Management (IAM) tooling. Fill in the same information as if an authorization request was created manually under the same conditions / validations.
Free Fields only sorted within their own type, so that it stays clear of what type a Free Field is (User or Organization Role)
Free Fields are sorted for the Users and the Organization Roles separately.
Automatic acces to a new Database Connection
When an Application Manager creates a new Database Connection, the Manager will automatically be granted access to that connection when saving, instead of having to do this afterwards.
Synchronization monitoring timeout
The performance has been improved which should prevent this timeout
The Authorization Box was updated on June 20, 2023. Below you will find the changes in this release:
Merging of contracts under certain conditions
Contracts can be merged when the value of the following fields are the same for all contracts that need to be merged: Customer id, Invoice Customer id, Application name, End date, Extension date, Period length, Extension type, Billable, Self-billing, Language, Characteristic, Price group, Contract is not terminated, Contract lines of the same Module have the same Discount percentage, the End Date of the latest exported Contract Entries need to be the same as the End Date of the Contract
Solved Bugs
The Authorization Box was updated on June 6, 2023. Below you will find the changes in this release:
Adding a remark to a contract
It is now possible to add a remark to a contract, so some extra information to a particular contract can be added.
The Authorization Box was updated on May 23, 2023. Below you will find the changes in this release:
Caching applied for the Object data
When making changes to the Objects of a Critical Permission, loading time has been reduced due to caching applied.
Blocking Organization Role
Changing and blocking of an Organization Role is now possible, so it is possible to make changes to the Template or Permission Sets (changing) and the role can be excluded from an Authorization Request (blocked for assignment). Users that have the blocked Organization Role assigned can still keep using the permissions that are linked to the Organization Role.
The Authorization Box was updated on May 8, 2023. Below you will find the changes in this release:
Ability to open the source object of an analysis result
From the analysis result, you can click on a Permission Set, an Organization Role, a User, etc. from within a datagrid. This way you can have a direct insight in the data and don't need to navigate to, for instance, the Permission Sets page or the Organization Roles page.
The Authorization Box was updated on April 24, 2023. Below you will find the changes in this release:
Analysis Results for conflicts in AX
In AX the Analysis Results for conflicts created are now created for all object types instead of only for Users.
Local IP and PC name not visible
On the About page of the Authorization Box, you can now find the Servername and IP address.
Description added in exported Organization Structure
When exporting the Organization Structure, the column of the Description is now added and editable.
Incremental synchronization will be made inactive
Since the full synchronization have become functionally more stable, the incremental synchronizations will be disabled and removed from the databases soon.
The Authorization Box was updated on April 12, 2023. Below You will find the most important changes:
See which user is used to set up the OAuth connection
On the “Edit database page” we added a User field that shows the user that was used for setting up an OAuth connection. This field is only visible when the Authentication method is set to “OAuth Device Code”.
The Authorization Box was updated on March 27, 2023. Below You will find the most important changes:
Navigate to the Conflict page from the Critical Permission page
From the Critical Permission page You can view the Conflicting Permissions. These Conflicting Permissions have been made clickable, so You can navigate to the Conflict page by clicking the name of the Conflicting Permission.
Company/Company Group added to the status overview of an Approval Request
The Company/Company Group has been added to the status overview of an Approval Request, so that You have a complete overview of the request/the request lines.
Filter Permission Sets based on the number of linked users (BC)
On the pages that show Analysis Results the results of type Permission Set are filtered on the number of users they are assigned to. When a Permission Set is not assigned to a user, the Analysis Result is now filtered out. By clicking the new checkbox “Also show Permission Sets with no users” on these pages, You can choose to add the Permission Sets with no users to the overview of the Analysis Results.
Review multiple Analysis Results from the Analysis Results Critical Permissions page (AX/F&O)
On the Analysis Results Critical Permissions page we added a Review button, so You can select multiple Analysis Results and review them all at once.
The Authorization Box was updated on March 13, 2023. Below You will find the most important changes:
Show to which Organization Roles a Template is assigned
On the edit page for an Authorization Template we added an overview that shows to which Organization Roles a Template has been assigned.
Block an Organization Role
We added the functionality to block an Organization Role. A blocked Organization Role can no longer be assigned to a user.
You can only block an Organization Role when there are no outstanding request that concern that role.
Blocking an Organization Role has no further consequences for a role. The role can still be revoked in an Authorization Request and users that have the Organization Role assigned to them, can still keep using the permissions that are are linked to the Organization Role. Altering the role is also still allowed.
Mention database connection in notification messages
We added the database connection in the header of the notification messages, so that You know to which connection the notification applies.
Display Authorization Requests in the order they are processed
A new column “Processed on” is added to the overviews of processed Authorization Requests, so that the requests are displayed in the order they are processed and no longer in the order they are created.
The Authorization Box was updated on February 27, 2023. Below You will find the most important changes:
Copy Default button added to the Critical Permission page (AX/F&O)
On the Critical Permission page a “Copy Default” button has been added. With this button you can overwrite the current set of Critical Permissions and Conflicts with the default set that is provided by 2-Control. Just be careful. Using this functionality will delete all monitoring data except for the settings.
Better insight in which Approval Requests need approval
On the Requests for approval page we separated the Approval Requests in requests that need your approval and requests that you have already approved but are are pending for other approvers to give their approval.
The requests are divided over two tabs: Pending Requests and Completed Requests. When you approve a request and no more approval is needed, the request will no longer be visible in any of the two tabs. When more approvers need to give their approval, the request wil be moved from the Pending Requests tab to the Completed Requests tab where it will be visible untill enough approvers have approved or the request is rejected. After that the request will disappear from the Completed Requests tab.
Filter Security Roles based on the number of linked users (AX/F&O)
On the pages that show Analysis Results the results of type Security Role are filtered on the number of users they are assigned to. When a Security Role is not assigned to a user, the Analysis Result is now filtered out. By clicking the new checkbox “Show Security Roles with no users” on these pages, You can choose to add the Security Roles with no users to the overview of the Analysis Results.
The Authorization Box was updated on February 13, 2023. Below You will find the most important changes:
Export of Organization Structure added the the Controller function profile
The AB role for importing/exporting the Organization Structure has been split in two separate roles. One for exporting the structure and one for importing the structure. This way we were able to add permission to export the Organization Structure to the Controller function profile.
Display User Name for Users that are linked to an Organization Role (AX/F&O only)
On the Organization Role page we added a new column for the User Name to the datagrid for the Users. So now both the User Id and the User Name are visible.
The Authorization Box was updated on February 1, 2023. Below You will find the most important changes:
Working of the “Dynamics Connection” checkboxes changed
On the Edit database page the “Dynamics Connection” checkboxes have been changed, so their working is more clear. The “Dynamics Connection unavailable” checkbox has been replaced by an icon that shows the result of the last connection test. You can no longer change the value for this field manually. When You want to disable the database connection manually, You can change the value of the “Dynamics connection disabled” checkbox.
Activate/deactivate a user using the import functionality
You can now activate/deactivate a user by using the import functionality from the Organization Chart. First You export the Organization Structure. When You open the Excel file there is a column Inactive on the tab Users. To make a user inactive, you need to enter a “x” or an “X” in this column. To activate a user, you need to clear the Inactive column. When You import the Users per Organization Role, the activation/deactivation of the user(s) will be processed.
Notes:
The Authorization Box was updated on January 16, 2023. Below You will find the most important changes:
Filter on Critical Permissions that have results
On the Critical Permissions page You can filter on Critical Permissions that have analysis results by clicking the checkbox “Only show Critical Permissions to review.” This way, all the Critical Permissions that don't have analysis results are filtered off the page.
Move an Organization Role to another Department
On the Organization Role page there now is a Department field. You can use this field to move an Organization Role to another Department by changing the selected Department.
Jump to a filtered overview of the analysis results from the Conflicts page (AX only)
On the Conflicts page for AX, You can now click on the colored balls for the analysis results and this brings You to a filtered overview of the analysis results.
Changes made to the review page for multiple analysis results of Critical Permissions (BC only)
The BC version of the review page for multiple analysis results of Critical Permissions has changed to make it's functionality better/more clear. The following changes have been made:
The Authorization Box was updated on January 2, 2023. Below You will find the most important changes:
Better insight in the request lines that can be approved
Changes have been made to an Approval Request to give a better understanding on what to approve. Now You only see the request lines that You can approve instead of all the request lines. There is also a new State column that shows if an Approval Line has already been approved. This column is clickable, so that You can see which users can give their approval and if they have already done so.