Skip to main content

Setting Up Administrator Account in NAV when Administrator accidentally deletes his own permission 😂

Introduction:

Today, I received a call from one of the NAV Administrators stating the issue as if I try to access the User Card page for some users I receive the following error.



Upon investigating it was clear that the Administrator by mistake deleted his own access to the company for all the users who have access to a different company.

Even using the Administrators account I cannot get access to a different company.
The condition here was that I cannot simply clear all User Access as per the blog below.
https://www.sauravdhyani.com/2012/12/you-are-not-authorized-to-sign-in.html

Pre-requisites

Microsoft Dynamics NAV / Business Central On-Premise

Demonstration:

1. Modifying User using SQL Database:
If observed it evident that whenever the Administrator account is added there should always be a Windows User associated with it.

To remove this constraint, modify the Username in User Table and Windows Security ID using SSMS in SQL Tables.

Changed the User Name to ADMINISTRATOR-1 and one character in User Security ID 

At this point, I wasn't sure if I could run any code in NAV to Add the User correctly. Then I remembered using the code from 'Add me as Administrator'.

2. Modifying 'Add me as Administrator' for the first user in NAVISION:

In NAV / Business Central if there are no users present, the button 'Add me as Administrator' is enabled.
This button will help you create a SUPER User.
I checked the code behind the button and found there is a codeunit 9000 - Users Create Super User that has a check that if Users are EMPTY then only User is created. 

I had to disable the check and run the codeunit.

Code commented to disable User Check

This will create the Windows User with SUPER Permission.

A new Administrator user created with SUPER Permission

Conclusion:

This is not the prescribed way by Microsoft and only works on NAV and Business Central On-Premise.

Comments

  1. Why didn't you use powershell? New-NavServerUserPermissionSet Command works fine.

    No fiddeling in C/AL and no T-SQL necessary.

    ReplyDelete
  2. Make sense!
    I will definitely try your approach.

    ReplyDelete

Post a Comment

Let me know your comments below. I'll try my best to answer your comment

Popular posts from this blog

Something went wrong. An Error occurred - Error Resolution

Introduction: With the installation of NAV 2018 or BC On-premise, I have observed that when creating New Server Instance and New WebServer Instance, you will get the error 'Something went wrong. An Error occurred '. I referred to the community questions below but didn't find my resolution. Hence, I decided to write this blog. Pre-requisites: Microsoft Dynamics Business Central - On-Premise / NAV 2018 Understanding of Business Central Authentication  Books & References: https://community.dynamics.com/nav/f/microsoft-dynamics-nav-forum/261301/nav-2018-web-client-an-error-has-occurred https://community.dynamics.com/business/f/dynamics-365-business-central-forum/421987/error-something-went-wrong-an-error-has-occurred-azure-ad-tenant Demonstration: 1. Creation of NAVServerInstance: In order to create NAVServerInstance, you can either add the Server Instance through Business Central Administration or Powershell command. Add Instance - Business Central Administration Add Insta...

How to resolve 'Edit in Excel' issues

  Introduction: As you know that D365 BC offers Edit in Excel functionality. But manipulating or customizing such a  standard functionality is difficult as there is not much control available. Hence, solving issues is also a difficult task. I will be resolving the issue for this specific issue, however, the debugging steps are similar. Pre- requisites : ODATA V4 Connectivity tool for Webservices Microsoft Dynamics 365 Business Central Books & References: https://community.dynamics.com/business/f/dynamics-365-business-central-forum/448226/issue-with-excel-add-in/ Demonstration: The way Edit in Excel works is that for a given page a Webservice is created adding PageID and Page Name. Hence, there are some Webservice connectivity checks in place to validate. 1. Edit in Excel Custom Action on the page: If you are adding Edit in Excel Action on the page, please ensure that you are providing appropriate PageName and Filter criteria as Webservice is using these parameters Refer Ed...

Installing LS Central - POS on local machine

Introduction: In this blog, I'm attempting to capture the LS Central - POS installation process on Local Machine. This blog has nothing to do LS Central - Server Setup for POS. LS Retail / LS Central - On Premise POS Pre- requisites : LS Central Installed on Server SSL Setup on LS Server (https://www.olisterr.tech/2020/03/how-to-setup-navuserpassword-with-ssl.html) LS - POS Installer Business Central - On Premise Installer Demonstration: Once your LS Retail / LS Central POS is setup on the main server. Just prior to Go-Live, you will actually have to install this POS on multiple systems and connect these POS to the main server with LS Retail / LS Central. 0.Preparation: Prior to actually installing Business Central On-Premise Windows Client, you need to make sure that you're able to ping the target with the correct Port number. For this I made use of PS-Ping tool.  PSPing - IP Address: Port If you're unable to PS-Ping the correct IP with Port number, simply check the Advan...