Advanced Cloud Security Documentation
Index

Assign Security to Users

Direct user assignment allows you to assign security features to specific individual users. This provides precise control over who gets which security rules.

Accessing User Assignment

  1. Open Advanced Cloud Security from the Tell Me search
  2. Click Assign Security to Users in the Assign Security column
  3. The Users and Permissions page opens

Understanding the User Assignment Page

The page shows:

  • Left side: List of Business Central users
  • Right side: Security features assigned to the selected user

Assigning Features to a User

Basic Assignment

  1. Select a user from the list
  2. In the security features panel, click New
  3. Select a security feature from the lookup
  4. The feature is now assigned

Assigning Multiple Features

  1. Click Add Features action
  2. Check multiple features to assign
  3. Click OK
  4. All selected features are assigned

Viewing Assigned Features

For each assigned feature, you can see:

Column Description
Feature ID The security feature code
Feature Name Descriptive name
Active Whether currently applied
Assigned Date When the assignment was made
Assigned By Who made the assignment

Managing Assignments

Removing an Assignment

  1. Select the assigned feature
  2. Click Delete
  3. Confirm the removal

The user will no longer have this feature applied (after page refresh).

Temporarily Disabling

To disable without removing:

  1. Select the assigned feature
  2. Uncheck Active
  3. Feature is disabled but remembered

Bulk Operations

To assign the same feature to multiple users:

  1. Select multiple users (Ctrl+Click)
  2. Click Assign Feature to Selected
  3. Choose the feature
  4. All selected users receive the assignment

User Assignment Examples

Example 1: Hide Cost Information

Assign "HIDE-COST" to warehouse staff:

  1. Select user: WAREHOUSE.USER
  2. Add feature: HIDE-COST
  3. Repeat for other warehouse users

Example 2: Sales Region Filter

Assign regional filters to sales reps:

User Feature
SALES.NORTH REGION-NORTH
SALES.SOUTH REGION-SOUTH
SALES.EAST REGION-EAST

Example 3: Combined Features

A user needing multiple security layers:

User: TEMP.WORKER

  • HIDE-COST (no cost visibility)
  • READ-ONLY-GL (can't edit GL)
  • LOCATION-A (can only see Location A)

Assignment Considerations

Extension Must Be Installed

The generated ACS wrapper extension must be installed for security to be evaluated. Without it, assignments have no effect.

Company-Specific

Assignments are per company:

  • Switch companies to see/modify assignments
  • Same user can have different features per company
  • Consider this for multi-company users

No Extension Regeneration Needed

User assignments take effect immediately:

  • No extension regeneration required
  • User may need to refresh browser
  • Changes apply on next page load

User Lookup Features

Filtering Users

Filter the user list:

  • By name
  • By user status (enabled/disabled)
  • By existing assignments

User Details

Click on a user to see:

  • User name and email
  • Assigned security features
  • Effective security (all sources)

Relationship to Other Assignments

User assignments work alongside:

  • Security group assignments
  • Permission set assignments

All sources are combined for effective security.

Priority When Combining

Scenario User Assignment Group Assignment Result
Only user has feature Assigned Not assigned Applied
Only group has feature Not assigned Assigned Applied
Both have same feature Assigned Assigned Applied once
Conflicting features Hide Show Hide (restrictive)

Auditing Assignments

Who Assigned What

View assignment history:

  1. Select an assignment
  2. View Assigned By and Assigned Date
  3. Use for audit purposes

Assignment Reports

Generate reports on assignments:

  1. Click Print action
  2. Select report format
  3. Review all user assignments

Best Practices

Use for Exceptions

  • Prefer group/permission set for common security
  • Use user assignment for individual exceptions
  • Document why individual assignments exist

Regular Review

  • Review user assignments periodically
  • Remove assignments for departed users
  • Update as roles change

Naming Consistency

  • Use consistent security feature names
  • Makes assignment easier to understand
  • Helps with reporting and auditing

Test After Assignment

Always verify:

  1. Generated extension is installed
  2. Refresh browser after changes
  3. Test affected pages
  4. Check effective security

Troubleshooting

Security Not Applied

  1. Verify the generated extension is installed
  2. Check assignment is Active
  3. Refresh browser
  4. Review Effective Security page for the user

Wrong Features Assigned

  1. Check for group assignments
  2. Check for permission set assignments
  3. Review effective security for all sources

Cannot Assign Features

  1. Verify you have the ACS EFQ permission set
  2. Check license is valid
  3. Ensure features exist