Exam MB-300 topic 3 question 42 discussion

Actual exam question from Microsoft's MB-300

Question #: 42
Topic #: 3

SIMULATION -
You are a functional consultant for Contoso Entertainment System USA (USMF).
You need to prevent a user named Arnie from adding receivable records to the customer payment journal. The solution must use only the default security roles.
To complete this task, sign in to the Dynamics 365 portal.

Show Suggested Answer

Suggested Answer: See explanation below.
The Accounts receivable payments clerk role contains the maintain customer payments duty. One of the privileges in the maintain customer payments duty is the Post customer payment journal transactions privilege.
You need to duplicate the Accounts receivable payments clerk role and duplicate the maintain customer payments duty. Remove the Post customer payment journal privilege from the new duty. Remove the original maintain customer payments duty from the new role and add the new duty to the role.
Remove the Accounts receivable payments clerk role from Arnie and assign the new role to Arnie.
This solution will ensure that Arnie can do everything he could do before with the exception of adding receivable records to the customer payment journal. It will also ensure that anyone else assigned to the Accounts receivable payments clerk role can do everything they'd expect to be able to do with that role.
An alternative solution would be to deny the Post customer payment journal transactions privilege in the maintain customer payments duty. However, this solution would affect all users assigned to the Accounts receivable payments clerk role.
Reference:
https://docs.google.com/spreadsheets/d/1Ao-5w4t80LZhks9O2WFcMZUFXfFkI3uMYxDPEXp-kz0/edit#gid=0 https://www.dynamics-tips.com/system-administration/security-roles

by Wouter_B at Feb. 13, 2021, 2:16 p.m.

Comments

Submit Cancel

Wouter_B

Highly Voted 4 years, 5 months ago

In this solution a new security role is created. The requirement is to use only default security roles. Would it not be enough to remove the Accounts receivable payment clerk role?

upvoted 11 times

...

tinnyou

Highly Voted 3 years, 4 months ago

This alos can be done: 1.Go to System administration > Users 2.Select the record 'Arnie' and click that UserId 3. On the User's form,select the Accounts receivable clerk and click [Remove role] button

upvoted 5 times

...

Daichisan

Most Recent 3 years, 8 months ago

This should be done: 1. Go to System administration > Security > Assign users to roles. 2. In the tree, select Accounts receivable clerk. 3. Select Manually assign / exclude users. 4. In the list, select a user. 5. Select Exclude from role to exclude the selected users from the role. 6. To remove exclusions, select the users that you want to remove exclusions for, and then select Reset status. 7. Close the page

upvoted 4 times

...

sivatadikonda

3 years, 9 months ago

Yes i too agree that the requirement is use default security role not creating the new security role

upvoted 2 times

...

kligmanmax

4 years, 5 months ago

https://docs.microsoft.com/en-us/learn/modules/plan-implement-security-finance-operations/10-exercise-5

upvoted 3 times

...