After having defined the Conflicts, the system lists al the conflicts and the user can analyze the conflicts (through the Critical Permissions). (link)
After having defined the Critical Permissions, the system can analyze the permissions. (link)
When an analysis has run successfully, it is possible to analyse the results per Organization role. (link)
With the Application Programming Interface you can access our data.
You can access these through our Web API and Authorization Request API. (link)
Approval Groups are a group of Approvers that can be assigned to one or more Organization Roles. (link)
Setup if you want approval activated and to set the number of approvers required per approval type. (link)
Approval Templates can be linked to an Organization role, to determine which approval limits apply to a user. (link)
A user that is assigned to approve authorization requests. (link)
Authorization Box and Azure environment. (link)
Users that are allowed to log in onto the Authorization Box. (link)
Authorizations are set up to a concept whereby employees / organization roles are responsible for certain data in Business Central. In addition, the authorizations ensure the segregation of duties in the organization. Default Business Central has no functionality to analyze the quality of the authorizations. This means organizations have no instrument to control their setup. Using the Monitoring module you can evaluate the quality of the permissions assigned by asking questions, defined as Critical Permissions.
Critical Permissions might be grouped in processes for ease of analysis. Furthermore, accepted risks might be excluded from analysis. Lastly, Conflicts are defined as a combination of Critical Permissions to be avoided for segregation of duties. (link)
You have to create an Authorization Request to assign or revoke an organization role to a user. (link)
Authorization templates are used to flexibly setup user related tables in Microsoft Dynamics 365 Business Central, including
extensions / customization and to define how you want the records to be filled. (link)
Authorization Box offers the possibility to make a backup of your processed data to copy to a new environment. You can make an export of the Authorization Box. In addition, it is possible to import an exported file again. For these options go to Setup => Backups . (link)
With Categories it is possible to make a subdivision in the Critical Permissions. (link)
The Change Log Entries show changes in Organization Roles, Approval settings, Master- Authorization- and Approval templates, Permission Sets, Permission Groups and Company Groups.
A Group consisting of several companies. (link)
With Conflicts you can define which Critical Permissions conflict with each other. (link)
Continuous Monitoring is a separate module in Authorization Box which automatically monitors authorization changes in Microsoft Dynamics 365 Business Central and notifies you of any critical changes. (link)
Written agreement between customer and 2-Controlware for use of licenses and modules provided with 2-Controlware. (link)
A Critical Permission is a query that can be best phrased in the form of a question. In such a question you can ask the Authorization Box to inquire which Users, Permission sets and Organization roles have a certain amount of access, with which they have a critical permission. (link)
You can set up a number of database connections with your Business Center environment as per contract. (link)
After running an analysis you have to evaluate the findings of that analysis. (link)
If the Organization formally accepts risks, these might be excluded from analysis. (link)
You can export the Organization structure to Excel.
Later on you can import the data in the same environment or another (new) environment, with or without changes made to the Excel document. (link)
With Free Fields you can define your own fields with the different types available. These fields can be used within the Master and/or Authorization Templates or on the User card to fill records with user data. (link)
The Master Template can be used to assign the generic fields (for all users), including the key fields of the table. The specific fields for some users can be assigned by using the Authorization Template. (link)
Multi Factor Authentication (MFA) requires users to successfully complete two steps to access the Authorization Box. (link)
You can add users which will have to receive a notification of a Critical Permission. The user has to configure his settings to receive these notifications. (link)
Notifications when several changes are being made in/with the Authorization Box. (link)
OAuth 2.0 is a standard authorization protocol designed to allow an application to access resources hosted by other applications on behalf of a user. (link)
An Organization role is linked to a Department. Each role has one or more Permission sets or Permission set Group assigned to it. (link)
In the Organization Chart you create Departments and Organization Roles. (link)
For performance reasons, the Permission Sets are being cached. (link)
The Authorization Box contains the functionality to manage permission sets at the lowest level.
The system will show all the available Permission Sets from the linked Microsoft Dynamics 365 Business Central database. (link)
With Permission Set Groups, you will be able to assign different Permission sets at once to Organization Roles. (link)
Pre and Post actions with templates make it possible to process a specific action before or after the allocation of the organization role to a user. (link)
When you are using proxy for your outbound traffic, additional setup is required. (link)
The recording of permission sets makes it possible within Authorization Box to add new permissions within your Business Central environment.
The Permission Set Recorder is being replaced by our Compliance Advanced Permissions Recorder app.
As of the 2024.10 release of the Compliance Essentials app, the recorder functionality is no longer available. (link)
Generally we update our Authorization Box every 2 weeks with new features and bug fixes. What is released can be found on the release notes page. (link)
The Synchronization Log shows alle changes that are made on a user in Business Central, through the Authorization Box. You can find these under User Management. (link)
Using the New template processor, increases the performance significantly, as the templates of the same table are combined and processed in one single query.
This results in much less traffic to Business Central. (link)
For performance reasons the User data is being cached. (link)
All current users from the Business Central and Authorization Box environment. (link)
On our YouTube channel you can find several videos explaining features you can use in the Authorization Box. We are adding new videos continuously. (link)