This training provides individuals with the knowledge and skills to build basic and advanced financial statements using Management Reporter.

1. Chapter 14: Security
14-1
CHAPTER 14: SECURITY
Objectives
The objectives are:
• Examine creating users and assigning roles
• Review group and company security
• Investigate security permissions in Report Viewer
• Explore Report Designer in the Generator role
Introduction
Security in Management Reporter ensures that only authorized users access the
program, whereas security roles determine the functionality that a user is
allowed. A total of four user roles are available, each of which is reviewed in this
part of the training.
NOTE: During installation of the product, a single administrative user is defined. This
user then logs on and defines additional users and optionally, groups of users.
Microsoft Official Training Materials for Microsoft Dynamics®
Your use of this content is subject to your current services agreement

2. Report Design in Management Reporter 2.0 for Microsoft Dynamics®
ERP
14-2
Defining Users and Roles
The first step when defining security in Management Reporter is setting up users.
Two considerations are taken into account when defining a user: the company
that the user has access to and the role that the user is assigned.
A total of four roles are available when defining users: Administrator, Designer,
Generator, and Viewer. However, users assigned the role of Viewer are only
allowed access to viewing reports in the Report Viewer aspect of the program.
Authentication Overview
Management Reporter uses Windows authentication. This method is helpful
when each user logs on to a Windows domain that has a unique account, because
the user does not have to learn a new user name and password to log on to
Management Reporter. Any password updates and security policy requirements
are managed by Active Directory, not by the Management Reporter
administrator.
Depending on the source system, users log on to specific companies using either
Windows authentication or SQL authentication by entering a user name and
password with database user rights.
Roles Overview
The following table provides an overview of the default access assigned to each
of the three roles shown when users log on to the Report Designer aspect of
Management Reporter. Permissions that display an X are granted.
Permission Administrator Designer Generator
Generate reports X X X
Export reports X X X
Create reports X X
Dimension set access X X
Building block group administration X X
All company access X
Company administration X
Security administration X
Undo building block checkout X
Unprotect protected building blocks X
Report queue administration X
Report library administration X
Microsoft Official Training Materials for Microsoft Dynamics®
Your use of this content is subject to your current services agreement

3. Chapter 14: Security
14-3
Create a New User
The following procedure defines a user that is assigned the generator role:
1. On the File menu, point to New and then click User.
2. In User name, click Search and enter the valid domain user
Generator.
3. In the Management Reporter assigned role field, select
Generator. The permissions granted will be displayed.
Additional options include the following:
• Account is disabled - select this option to disable a user's account
without deleting it.
FIGURE 14.1 USER - GENERATOR
Microsoft Official Training Materials for Microsoft Dynamics®
Your use of this content is subject to your current services agreement

4. Report Design in Management Reporter 2.0 for Microsoft Dynamics®
ERP
14-4
Working with Groups and Companies
Defining one or more groups of users is an optional step when you are defining
security in Management Reporter. Groups are helpful in the following situations:
• Assigning company access
• Defining access to folders or reports in the Report Viewer Library
The Companies function allows administrators to view and edit users and groups
of users that have access to a company.
Define a Group
The following steps demonstrate defining a group in Management Reporter
security:
1. On the File menu, point to New and then click Group.
2. In Group name, type "Accounting".
3. In Group description, type "Accounting group".
4. Click Add, select the Generator user, and then click OK.
5. Click the Company Access tab.
6. Select the access box for the FW company.
7. Click OK to save and close the Groups window.
FIGURE 14.2 GROUPS
Microsoft Official Training Materials for Microsoft Dynamics®
Your use of this content is subject to your current services agreement

5. Chapter 14: Security
14-5
Review Company
The following steps show the process of reviewing access to the Fabrikam, Inc.
(FW) company:
1. In the navigation pane, verify that Security is active and then click
the Companies icon.
2. In the view pane, double-click FW.
3. Click Add, select the Accounting group, and then click OK.
4. Click OK to save and close the Edit Company Access dialog box.
NOTE: The Administrator users cannot be removed from the FW entity because of their
respective user permissions. The administrator has access to all entities by default.
If a user does not have permission to all companies, he or she inherits company
access from any group that he or she is a member of.
Report Viewer Security
After defining users and optional groups, you must also assign access in the
library, folders, or reports defined in Report Viewer.
By default, all users are part of an Everyone group that has access to the public
folder in the Report Library. The Everyone group is not editable and does not
appear in the Groups dialog, but it can be used in the Report Library to give all
users access to all folders, reports, and any external documents that are added to
the library. If security is assigned at the folder level, all reports, versions of a
report, and external documents within the folder inherit the access. Security can
also be assigned on an item by item basis. Security applied in the reporting tree
definition is applied in addition to the Report Library security.
Modify Library Security
Report Viewer opens automatically when a user generates a report in Report
Designer to the Management Reporter output type. Open Report Viewer directly
from the Start menu by selecting the Microsoft Dynamics ERP, Management
Reporter folder, and then selecting Report Viewer.
The following procedure explores how to assign security within Report Viewer:
1. Select the desired level: folder or report, and then right-click.
2. Select the Report Library Permissions menu item.
3. Click Add.
Microsoft Official Training Materials for Microsoft Dynamics®
Your use of this content is subject to your current services agreement

6. Report Design in Management Reporter 2.0 for Microsoft Dynamics®
ERP
14-6
4. Click the Accounting group and then click OK. Notice that the icons
differ between the group and user.
NOTE: Report Library permissions can also be setup in the Report Designer by going to
the Tools menu and Report Library Permissions option.
FIGURE 14.3 LIBRARY PERMISSIONS
Inherited Security
The Inherited From field displays the level at which security is assigned to a
particular user or group of users. The Show inherited permissions option displays
users who inherit security access based on the permissions of the folder or object.
The following steps explore the display of the Inherited From field and how
selecting Show inherited permissions affects the access list:
1. If it is necessary, expand the Library icon.
2. Right-click the Balance Sheets folder and select the Report Library
Permissions menu item. Notice that Library displays in the
Inherited From field.
3. Click Show inherited permissions. The Administrator is added to
the list of users. All users who have the administrator role have
inherited access to Report Viewer.
4. Click OK to save and close the Modify Security window.
Microsoft Official Training Materials for Microsoft Dynamics®
Your use of this content is subject to your current services agreement

7. Chapter 14: Security
14-7
Generator Functionality
This lesson explores the functionality for users assigned the generator role.
Generators are able to generate reports to all output types. In addition, users
assigned the generator role are allowed the exporting functionality within Report
Viewer.
Generator Navigation
When a user logs on with the generator role, Report Definitions are the only
option that displays in the navigation pane. Double-click to open the desired
report; notice that Read-Only follows the report name in the title bar.
On the Report tab, generators can update the following report parameters:
• Detail level
• Provisional
• Date information
Click the Output and Distribution tab. All options are available for update.
Click the Headers and Footers tab. Items defined on this tab cannot be updated
by users who have the generator role.
Click the Settings tab. Click the Other button. The following options that relate
to Page Setup are available for update:
• Margins
• Orientation
• Scaling
• Page order
• Paper
Click OK to close the Report Settings dialog box.
If the report generator makes updates to the report definition, the option exists to
Save My Report Overrides. After saving overrides, users can select the Remove
My Report Overrides option to reset the report to its original configuration.
NOTE: Make sure that new users who are generating reports to the Management
Reporter output type are assigned folder access within Report Viewer. If the user does
not have permissions to the output location, he or she will not be able to generate the
report. Refer to "Report Viewer Security" topic earlier in this part of the training for
more information
Microsoft Official Training Materials for Microsoft Dynamics®
Your use of this content is subject to your current services agreement

8. Report Design in Management Reporter 2.0 for Microsoft Dynamics®
ERP
14-8
User Preferences
Users who have any security role have the option to adjust their user preferences.
On the Tools menu, click the Options menu item.
Report Designer User preferences include the following:
• At startup:
o Show Welcome page
o Load last loaded report
o Show Open window
o Show empty environment
• Display confirmation before exiting Management Reporter
• Automatically apply cell underline in column headers
Report Viewer User preferences include the following:
• Show report library
• Open last loaded report
Summary
This part of training introduced the security functionality within Management
Reporter. The training also reviewed four roles available for assignment to users
and the related role permissions, in addition to group and company access.
The exercises showed how to define a user who has the generator role and
explored access to both Report Designer and Report Viewer.
Microsoft Official Training Materials for Microsoft Dynamics®
Your use of this content is subject to your current services agreement

9. Chapter 14: Security
14-9
Test Your Knowledge
Test your knowledge with the following questions.
1. Which of the following is a true statement about user security?
( ) The administrator must define additional users
( ) A user's role grants permissions that cannot be modified
( ) All permissions are available to all user roles
( ) Users assigned the administrator role can administer security
2. Which of the following are true statements about inheritance? (Select all that
apply)
( ) Company access can be inherited from a user's group
( ) Report access can be inherited from the report library
( ) A user's role can be inherited from the group
( ) Permissions in Report Viewer can be inherited from a user's role
Microsoft Official Training Materials for Microsoft Dynamics®
Your use of this content is subject to your current services agreement

10. Report Design in Management Reporter 2.0 for Microsoft Dynamics®
ERP
14-10
Quick Interaction: Lessons Learned
Take a moment and write down three key points you have learned from this
chapter.
1.
2.
3.
Microsoft Official Training Materials for Microsoft Dynamics®
Your use of this content is subject to your current services agreement

11. Chapter 14: Security
14-11
Solutions
Test Your Knowledge
1. Which of the following is a true statement about user security?
( ) The administrator must define additional users
( ) A user's role grants permissions that cannot be modified
( ) All permissions are available to all user roles
(•) Users assigned the administrator role can administer security
2. Which of the following are true statements about inheritance? Mark all that
apply. (Select all that apply)
(√) Company access can be inherited from a user's group
(√) Report access can be inherited from the report library
( ) A user's role can be inherited from the group
(√) Permissions in Report Viewer can be inherited from a user's role
Microsoft Official Training Materials for Microsoft Dynamics®
Your use of this content is subject to your current services agreement

12. Report Design in Management Reporter 2.0 for Microsoft Dynamics®
ERP
14-12 Microsoft Official Training Materials for Microsoft Dynamics®
Your use of this content is subject to your current services agreement