You do not have permission to revalue inventory

Recently, there was a forum post that caught my attention. Mainly because I have previously posted a blog article to address a similar security issue with the Dynamics GP Manufacturing Series. Here is a link to the original post.

You do not have access privileges needed to change this quantity

When I read the following post below, I had to resist the urge to send a link to the post above, as though the issues are related, they are not the same issue.

https://community.dynamics.com/gp/f/32/t/163299

Cudos to Dynamics Community forum user ELEAZER for writing such a cogent post, and putting in the work on the Dynamics GP Security setting side.

So I have this weird situation I know that to give a user security access for the Replace Cost button in Standard Cost Changes I would have to give the user the MFG ADMIN* and that will enable the feature. 

Image 1 - Standard Cost Changes; Replace Costs Button

After giving the role to a couple users the button was no longer grayed out as you see in the picture above, but they cannot Replace Costs.The person who was performing this task is the only person who can Replace Costs with no issues. In addition, the first thing I did was give these user the same security as the employee who is able to perform this task and still did not work. Even I tried to performed this task as SA and was denied as well with the following message.

In her post, ELEAZER makes a very good point. The SA user cannot perform the Replace Costs process - Yikes!

In Dynamics GP, as a general rule, a user assigned the POWERUSER role or the SA account are "all powerful," and can perform any task. What happens when the SA or a POWERUSER tries to Replace Costs in the Standard Costs Changes window and they receive the following error. "You do not have permission to revalue inventory?" 

There is a simple cause and a simple solution to this problem. Dynamics GP Manufacturing was once a third party product (a very long time ago), and a programmer, was likely asked to make sure that a user could not just revalue inventory.  So this programmer created a feature, outside typical GP security setup to control access to the Replace Costs button.

In the end, what was produced is security more akin to Hold Processing or Tolerances in various Financial and Distribution Modules; a security setting that exists at the module configuration level and not at the System Security level.

When the user receives the "You do not have permission to revalue inventory." error, either they have not be granted access, or this feature hasn't been set up at all - it is typical the latter.  If you implement GP Manufacturing, you should add explanation and configuration of this feature to your setup checklist.

The security setting for Revaluation is maintained in Manufacturing > Setup >System Defaults > Costing window

The Costing Preferences Defaults window has a Revaluation Security Set field, located at the bottom of the window. You likely have a Security Set, setup here already, as some users can perform this action.

Clicking on the Revaluation Security Set hyperlink to the left of the field will open the Process Security Setup window, where you can use the User ID's lookup field to add users to this security group.

There is an alternative configuration to use a password, which has the advantage of stopping unwanted changes, and requiring anyone desiring to make such a change to hunt down the person who has the password and explain why they are making the changes.

Configuring based on User ID versus an overall password is a tough decision. Empowering a user means the user can make changes without oversight, and passwords escape into the wild - either way, there are pros and cons.

I hope this post gets you where you're going.

"You do not have access privileges needed to change this quantity" in GP Manufacturing

In Dynamics GP, as a general rule, a user assigned the POWERUSER role or the sa account are "all powerful," and can perform any task. What happens when the sa or a POWERUSER tries to change the ending quantity on the Manufacturing Order and they receive the following error. "You do not have access privileges needed to change this quantity?" I have seen this issue a couple of times in the forum recently, so I thought it would be prudent to write a blog article on the topic.

There is a simple cause and a simple solution to this problem. Dynamics GP Manufacturing was once a third party product (a very long time ago), and a programmer, was likely asked to make sure that a user could not just change the quantities on a Manufacturing Order.  So this programmer created a feature, outside typical GP security setup to control access to Manufacturing Order quantity field changes.

In the end, what was produced is security more akin to Hold Processing or Tolerances in various Financial and Distribution Modules; a security setting that exists at the module configuration level and not at the System Security level.

When the user receives the "You do not have access privileges needed to change this quantity." error, either they have not be granted access, or this feature hasn't been set up at all - it is typical the latter.  If you implement GP Manufacturing, you should add explanation and configuration of this feature to your setup checklist.

Here's an overview of how to set this feature up:

First - navigate to Manufacturing > Setup > System Defaults > MO Schedule Prefs and select your Default Settings.  Enter a Process Security ID for Manufacturing Qty Overrides. 

You should receive a dialogue box indicating the ID doesn't exist, and asking if you would like to create it.  You should click Add.

Clicking Add will trigger System Security, if a System Password has been configured. So, you'll need to know this password before you begin to setup Process Security.

Once you have provided the correct system password, the Process Security Setup window will open.  At this point you have a decision to make.  Configure security to prompt for a password when a Manufacturing Quantity is changed, or configure security to only allow approved users to change Manufacturing Quantities.

While the easiest to setup and maintain option is Password control, passwords have a tendency to 'escape into the wild' and the next thing you know, your control is control in name only. I am a fan of configuring user specific control. If you go the User ID route, you should add this step to your New User Check List. If you don't have a New User Check List, create one.  

If you go the Password route, simply enter a password here, and distribute the password to personnel authorized to change quantities on Manufacturing Orders.  If not, selecting the User ID radio button will bring up a list box, where User ID's authorized to change quantities on Manufacturing Orders can be inserted.

I am not a big fan of the design of this screen. In order to add users, you must click on the Magnifying glass, look up a user and select it, you cannot tab through the fields typing in User ID's.

What is not immediately obvious, is opening the Process Security setup window, which opens automatically, when prompted by initiating configuration, is there is no clear way to open this window, after initial setup has been completed.  So, a shortcut to this window should be added to your home screen. 

This window can be accessed under Manufacturing > Setup > Process Security. I think it would be better to add a shortcut from this window.

To add a shortcut to your Home Screen, first, go to your Home Screen. Then right click in the Navigation Pane and select Add > Add Window.  

This will open up the Add Window Shortcut Window.  To Add the Process Security Setup window, you must browse to and select Manufacturing > 3rd Party > Process Security Setup (Alphabetically) and click Add.

Earlier I mentioned the reason this feature fell outside normal GP System Security setup, was due to the fact Manufacturing was once a 3rd party application - you will note, many of the Manufacturing Windows are still listed as 3rd party.  This is something to be aware of when working with Manufacturing Windows, Reports and the like.

Now that you've added this shortcut, you're ready to move forward using this feature.