{"id":3118,"date":"2026-10-17T18:00:12","date_gmt":"2026-10-17T12:30:12","guid":{"rendered":"https:\/\/www.nevastech.com\/blog\/?p=3118"},"modified":"2026-10-17T21:20:35","modified_gmt":"2026-10-17T15:50:35","slug":"dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist","status":"publish","type":"post","link":"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/","title":{"rendered":"Dynamics GP Security Roles and Tasks: A Setup Guide and Review Checklist"},"content":{"rendered":"\n<p>Ask an auditor what worries them most in a Dynamics GP system, and the answer is rarely the software itself. It is who can do what. A clerk who can create a vendor and also print the check, a former employee whose login still works, or a finance team in which everyone has full access because it was easier during the implementation: these are the findings that appear in management letters year after year.<\/p>\n<p><a href=\"https:\/\/www.nevastech.com\/solutions\/microsoft-dynamics-erp\/microsoft-dynamics-gp\/\">Microsoft Dynamics GP<\/a> has a sound security model built on roles and tasks, but it only protects the business when it is set up deliberately and reviewed regularly. This article explains how the model works, how to set it up step by step, and a checklist that controllers and IT managers can use each quarter.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"How_Security_in_Dynamics_GP_Works\"><\/span>How Security in Dynamics GP Works<span class=\"ez-toc-section-end\"><\/span><\/h2><div id=\"ez-toc-container\" class=\"ez-toc-v2_0_79 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title ez-toc-toggle\" style=\"cursor:pointer\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 eztoc-toggle-hide-by-default' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/#How_Security_in_Dynamics_GP_Works\" >How Security in Dynamics GP Works<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/#The_Built-In_Roles_and_Their_Risks\" >The Built-In Roles and Their Risks<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/#Setting_Up_Security_Step_by_Step\" >Setting Up Security, Step by Step<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/#Segregation_of_Duties\" >Segregation of Duties<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/#Other_Security_Layers_to_Check\" >Other Security Layers to Check<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/#A_Quarterly_Review_Checklist\" >A Quarterly Review Checklist<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/#How_Nevas_Technologies_Helps\" >How Nevas Technologies Helps<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/#Frequently_Asked_Questions\" >Frequently Asked Questions<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/#Conclusion\" >Conclusion<\/a><\/li><\/ul><\/nav><\/div>\n\n<p>GP security is built from four layers, each one grouping the layer below it.<\/p>\n<div style=\"width:100%; overflow-x:auto;\">\n<table style=\"width:100%; border-collapse:collapse; margin:20px 0;\">\n<thead>\n<tr>\n<th scope=\"col\" style=\"border:1px solid #ccc; padding:10px; text-align:left;\">Layer<\/th>\n<th scope=\"col\" style=\"border:1px solid #ccc; padding:10px; text-align:left;\">What it is<\/th>\n<th scope=\"col\" style=\"border:1px solid #ccc; padding:10px; text-align:left;\">Example<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"border:1px solid #ccc; padding:10px;\">Operation<\/td>\n<td style=\"border:1px solid #ccc; padding:10px;\">A single window, report or posting permission.<\/td>\n<td style=\"border:1px solid #ccc; padding:10px;\">Vendor Maintenance window.<\/td>\n<\/tr>\n<tr>\n<td style=\"border:1px solid #ccc; padding:10px;\">Task<\/td>\n<td style=\"border:1px solid #ccc; padding:10px;\">A group of operations needed for one piece of work.<\/td>\n<td style=\"border:1px solid #ccc; padding:10px;\">Maintain vendor records.<\/td>\n<\/tr>\n<tr>\n<td style=\"border:1px solid #ccc; padding:10px;\">Role<\/td>\n<td style=\"border:1px solid #ccc; padding:10px;\">A group of tasks that matches a job.<\/td>\n<td style=\"border:1px solid #ccc; padding:10px;\">Accounts payable clerk.<\/td>\n<\/tr>\n<tr>\n<td style=\"border:1px solid #ccc; padding:10px;\">User<\/td>\n<td style=\"border:1px solid #ccc; padding:10px;\">A person, assigned one or more roles for each company.<\/td>\n<td style=\"border:1px solid #ccc; padding:10px;\">Priya, AP clerk in Company A.<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<p>Three rules follow from this structure, as Microsoft explains in its role-based security FAQ.<\/p>\n<ul>\n<li><strong>Access is granted, never denied.<\/strong> A user can open a window only if at least one of their roles includes it. There is no way to take access away with a &#8220;deny&#8221; setting, so a user with two roles receives everything in both.<\/li>\n<li><strong>Assignments are made per company.<\/strong> A user can be an AP clerk in one company and have inquiry access only in another.<\/li>\n<li><strong>Every role includes a basic default task,<\/strong> which covers common windows such as the user date.<\/li>\n<\/ul>\n<p>The setup windows are under <strong>Tools &gt; Setup &gt; System<\/strong>: Security Tasks, Security Roles and User Security.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"The_Built-In_Roles_and_Their_Risks\"><\/span>The Built-In Roles and Their Risks<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Dynamics GP is delivered with a set of ready-made roles and tasks, recognizable by names such as AP CLERK* or ACCOUNTING MANAGER*. They are a useful starting point, but they were designed to be broad, so they often grant more than a particular job needs. Copy a built-in role, give the copy your own name, and then remove what is not required, rather than assigning the original.<\/p>\n<p>The most sensitive role is <strong>POWERUSER<\/strong>. It gives access to every window, report and posting function in every module. The system administrator account is assigned to it by default, and during implementations it is frequently given to key users &#8220;for now&#8221;. In many reviews we find that &#8220;for now&#8221; has lasted for years. Apart from one or two administrators, nobody should hold POWERUSER in a live company.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Setting_Up_Security_Step_by_Step\"><\/span>Setting Up Security, Step by Step<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The following order keeps the work manageable and gives auditors a clear record.<\/p>\n<ol>\n<li><strong>List the jobs, not the people:<\/strong> Write down each job in finance and operations: AP clerk, AR clerk, payroll administrator, purchasing officer, controller, inquiry user. Each job will become one role.<\/li>\n<li><strong>Describe what each job must be able to do:<\/strong> For an AP clerk, this might be entering invoices, running payables inquiries and printing the aged trial balance, but not maintaining vendors or printing checks.<\/li>\n<li><strong>Build or adapt the tasks:<\/strong> In Security Task Setup, copy the nearest built-in task and adjust its operations. Keep task names clear, for example AP_INVOICE_ENTRY.<\/li>\n<li><strong>Build the roles:<\/strong> In Security Role Setup, combine the tasks for each job. Name roles after jobs, not after people, so that a new employee can be assigned without new design work.<\/li>\n<li><strong>Assign roles to users:<\/strong> Use User Security Setup, company by company. Assign only the roles the person needs in each company.<\/li>\n<li><strong>Set modified forms and reports:<\/strong> If your company uses a customization of a window or report, choose in the same window which version each user sees.<\/li>\n<li><strong>Test with a real user:<\/strong> Sign in as a test user with each role, try the daily work and a few things the role should not allow, and correct the gaps.<\/li>\n<li><strong>Document the result:<\/strong> Keep a matrix of roles, tasks and users, signed off by the controller. Your auditors will ask for it.<\/li>\n<\/ol>\n<h2><span class=\"ez-toc-section\" id=\"Segregation_of_Duties\"><\/span>Segregation of Duties<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Segregation of duties means that no single person can carry out every step of a sensitive process without someone else being involved. In Dynamics GP, the combinations that auditors examine most closely are these.<\/p>\n<div style=\"width:100%; overflow-x:auto;\">\n<table style=\"width:100%; border-collapse:collapse; margin:20px 0;\">\n<thead>\n<tr>\n<th scope=\"col\" style=\"border:1px solid #ccc; padding:10px; text-align:left;\">Should be separated<\/th>\n<th scope=\"col\" style=\"border:1px solid #ccc; padding:10px; text-align:left;\">Why<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"border:1px solid #ccc; padding:10px;\">Create or change vendors, and enter or pay vendor invoices.<\/td>\n<td style=\"border:1px solid #ccc; padding:10px;\">Prevents payments to fictitious vendors.<\/td>\n<\/tr>\n<tr>\n<td style=\"border:1px solid #ccc; padding:10px;\">Enter journal entries, and post or approve them.<\/td>\n<td style=\"border:1px solid #ccc; padding:10px;\">Ensures a second person reviews adjustments.<\/td>\n<\/tr>\n<tr>\n<td style=\"border:1px solid #ccc; padding:10px;\">Maintain employee pay rates, and process payroll.<\/td>\n<td style=\"border:1px solid #ccc; padding:10px;\">Prevents unauthorized pay changes.<\/td>\n<\/tr>\n<tr>\n<td style=\"border:1px solid #ccc; padding:10px;\">Create customers or credit limits, and apply cash receipts.<\/td>\n<td style=\"border:1px solid #ccc; padding:10px;\">Protects against hidden write-offs.<\/td>\n<\/tr>\n<tr>\n<td style=\"border:1px solid #ccc; padding:10px;\">Maintain security, and use financial windows.<\/td>\n<td style=\"border:1px solid #ccc; padding:10px;\">Stops an administrator from granting themselves access unnoticed.<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<p>Smaller organizations cannot always separate every duty, because the same two or three people do most of the work. In that case, compensating controls are acceptable: a manager reviews the vendor change report every month, or approval workflows are switched on for payables batches and journal entries. Most controllers will recognize that a documented review is better than a theoretical separation that nobody follows.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Other_Security_Layers_to_Check\"><\/span>Other Security Layers to Check<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Roles and tasks control windows and reports, but several other layers decide what a user can really reach.<\/p>\n<ul>\n<li><strong>SQL Server logins:<\/strong> Every Dynamics GP user also has a SQL Server login. Strong password rules, expiry and lockout should be applied there, and the sa and DYNSA accounts should be used only for administration.<\/li>\n<li><strong>Account-level security:<\/strong> Limits which general ledger accounts a user can see, which is useful for departmental budgets.<\/li>\n<li><strong>Field-level security:<\/strong> Can hide or lock individual fields, such as bank account numbers or salary amounts.<\/li>\n<li><strong>Direct database access:<\/strong> Excel refreshable reports, SmartList exports and reporting tools read data outside Dynamics GP&#8217;s own security, so access to them must be controlled separately.<\/li>\n<li><strong>Workflow approvals:<\/strong> Approvals for batches, purchase requisitions and vendor changes add a second person to the process.<\/li>\n<li><strong>Third-party products:<\/strong> Often have their own security settings, which are easy to forget after an upgrade.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"A_Quarterly_Review_Checklist\"><\/span>A Quarterly Review Checklist<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Security that was correct at go-live drifts as people join, leave and change roles. We recommend a short review every quarter and a full review once a year.<\/p>\n<ul>\n<li>Compare the list of active Dynamics GP users with the current staff list from HR, and deactivate anyone who has left.<\/li>\n<li>Check who holds POWERUSER, and remove it from anyone who is not an administrator.<\/li>\n<li>Review each user&#8217;s roles in every company against their current job.<\/li>\n<li>Check the segregation-of-duties combinations in the table above, and record any accepted exceptions with their compensating control.<\/li>\n<li>Review any new task or role created since the last review, and confirm who approved it.<\/li>\n<li>Check SQL Server logins for shared accounts, old test users and accounts that have not been used for 90 days.<\/li>\n<li>Confirm that access to reporting tools and refreshable Excel files matches the users&#8217; roles.<\/li>\n<li>Check that security still works after any update or Dynamics GP upgrade, because new windows may need to be added to existing tasks.<\/li>\n<li>File the signed results with your audit documentation.<\/li>\n<\/ul>\n<p>Analyzing security is easier with good reports. Dynamics GP&#8217;s Security Resource Descriptions table, populated through the Clear Data window, shows which roles and tasks give access to a given window, and SQL queries or third-party tools can then produce a full user-by-window matrix.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"How_Nevas_Technologies_Helps\"><\/span>How Nevas Technologies Helps<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Nevas Technologies has supported Dynamics GP for more than 20 years and regularly helps finance teams prepare for audits. Our consultants review existing security, design roles that match your jobs, remove excess POWERUSER access, set up approval workflows, and produce the documentation auditors expect. Our <a href=\"https:\/\/www.nevastech.com\/solutions\/microsoft-dynamics-erp\/microsoft-dynamics-gp\/dynamics-gp-support\">Dynamics GP support<\/a> team can carry out the quarterly review for you, and <a href=\"https:\/\/www.nevastech.com\/solutions\/microsoft-dynamics-erp\/microsoft-dynamics-gp\/dynamics-gp-training\">Dynamics GP training<\/a> prepares your system administrator to maintain security in-house.<\/p>\n<p>For companies planning a <a href=\"https:\/\/www.nevastech.com\/services\/dynamics-gp-to-business-central-migration\">Dynamics GP to Business Central migration<\/a>, a clean GP security design is also a strong starting point, because the job-based roles carry over as a model for permission sets in <a href=\"https:\/\/www.nevastech.com\/solutions\/microsoft-dynamics-365\/microsoft-dynamics-365-business-central\/\">Dynamics 365 Business Central<\/a>.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Frequently_Asked_Questions\"><\/span>Frequently Asked Questions<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><strong>Can we deny one window to a user who otherwise has full access?<\/strong><br \/>\n  No. GP security only grants access. To remove a window, take the user off the role that contains it and assign a narrower role instead.<\/p>\n<p><strong>Does every user need a separate GP license?<\/strong><br \/>\n  GP is licensed by concurrent users, so the number of people who can sign in at the same time is limited by your Dynamics GP license. Security roles are separate from licensing, but removing unused logins keeps both tidy.<\/p>\n<p><strong>How often should we review security?<\/strong><br \/>\n  A light review each quarter and a full review each year, plus a check whenever someone changes job or leaves.<\/p>\n<p><strong>Is it safe for users to share a login?<\/strong><br \/>\n  No. Shared logins make it impossible to know who posted a transaction, which auditors treat as a serious weakness.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Conclusion\"><\/span>Conclusion<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Summarizing the approach: design roles around jobs, grant only what each job needs, keep POWERUSER for administrators, separate sensitive duties or document how you compensate, and review the result every quarter. We emphasize the review, because a well-designed setup becomes unsafe within a year if nobody looks at it.<\/p>\n<p>If you would like an independent security review before your next audit, <a href=\"https:\/\/www.nevastech.com\/contact\">contact our team<\/a> or <a href=\"https:\/\/www.nevastech.com\/request-a-quote\">request a quote<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Ask an auditor what worries them most in a Dynamics GP system, and the answer is rarely the software itself. It is who can do what. A clerk who can create a vendor and also print the check, a former employee whose login still works, or a finance team in which everyone has full access &#8230; <a title=\"Dynamics GP Security Roles and Tasks: A Setup Guide and Review Checklist\" class=\"read-more\" href=\"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/\" aria-label=\"Read more about Dynamics GP Security Roles and Tasks: A Setup Guide and Review Checklist\">Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":3119,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-3118","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dynamics-gp"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Dynamics GP Security Roles and Tasks: Setup Guide and Checklist<\/title>\n<meta name=\"description\" content=\"Set up Dynamics GP security roles and tasks the right way, separate key duties, and use our quarterly checklist before your next audit.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Dynamics GP Security Roles and Tasks: Setup Guide and Checklist\" \/>\n<meta property=\"og:description\" content=\"Set up Dynamics GP security roles and tasks the right way, separate key duties, and use our quarterly checklist before your next audit.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/\" \/>\n<meta property=\"og:site_name\" content=\"Nevas Technologies Insights\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-17T12:30:12+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-17T15:50:35+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.nevastech.com\/blog\/wp-content\/uploads\/2026\/10\/Dynamics-GP-Security-Roles-Guide.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1672\" \/>\n\t<meta property=\"og:image:height\" content=\"941\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"John Solomon\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"John Solomon\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Dynamics GP Security Roles and Tasks: Setup Guide and Checklist","description":"Set up Dynamics GP security roles and tasks the right way, separate key duties, and use our quarterly checklist before your next audit.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/","og_locale":"en_US","og_type":"article","og_title":"Dynamics GP Security Roles and Tasks: Setup Guide and Checklist","og_description":"Set up Dynamics GP security roles and tasks the right way, separate key duties, and use our quarterly checklist before your next audit.","og_url":"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/","og_site_name":"Nevas Technologies Insights","article_published_time":"2026-10-17T12:30:12+00:00","article_modified_time":"2026-10-17T15:50:35+00:00","og_image":[{"width":1672,"height":941,"url":"https:\/\/www.nevastech.com\/blog\/wp-content\/uploads\/2026\/10\/Dynamics-GP-Security-Roles-Guide.png","type":"image\/png"}],"author":"John Solomon","twitter_card":"summary_large_image","twitter_misc":{"Written by":"John Solomon","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/#article","isPartOf":{"@id":"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/"},"author":{"name":"John Solomon","@id":"https:\/\/www.nevastech.com\/blog\/#\/schema\/person\/4999a5a32569d9cb02ceb097d8bb6f9f"},"headline":"Dynamics GP Security Roles and Tasks: A Setup Guide and Review Checklist","datePublished":"2026-10-17T12:30:12+00:00","dateModified":"2026-10-17T15:50:35+00:00","mainEntityOfPage":{"@id":"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/"},"wordCount":1575,"publisher":{"@id":"https:\/\/www.nevastech.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/#primaryimage"},"thumbnailUrl":"https:\/\/www.nevastech.com\/blog\/wp-content\/uploads\/2026\/10\/Dynamics-GP-Security-Roles-Guide.png","articleSection":["Dynamics GP"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/","url":"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/","name":"Dynamics GP Security Roles and Tasks: Setup Guide and Checklist","isPartOf":{"@id":"https:\/\/www.nevastech.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/#primaryimage"},"image":{"@id":"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/#primaryimage"},"thumbnailUrl":"https:\/\/www.nevastech.com\/blog\/wp-content\/uploads\/2026\/10\/Dynamics-GP-Security-Roles-Guide.png","datePublished":"2026-10-17T12:30:12+00:00","dateModified":"2026-10-17T15:50:35+00:00","description":"Set up Dynamics GP security roles and tasks the right way, separate key duties, and use our quarterly checklist before your next audit.","breadcrumb":{"@id":"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/#primaryimage","url":"https:\/\/www.nevastech.com\/blog\/wp-content\/uploads\/2026\/10\/Dynamics-GP-Security-Roles-Guide.png","contentUrl":"https:\/\/www.nevastech.com\/blog\/wp-content\/uploads\/2026\/10\/Dynamics-GP-Security-Roles-Guide.png","width":1672,"height":941,"caption":"Dynamics GP Security Roles Guide"},{"@type":"BreadcrumbList","@id":"https:\/\/www.nevastech.com\/blog\/dynamics-gp-security-roles-and-tasks-setup-guide-and-checklist\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.nevastech.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Dynamics GP Security Roles and Tasks: A Setup Guide and Review Checklist"}]},{"@type":"WebSite","@id":"https:\/\/www.nevastech.com\/blog\/#website","url":"https:\/\/www.nevastech.com\/blog\/","name":"Nevas Technologies Insights","description":"Nevas Technologies Insights","publisher":{"@id":"https:\/\/www.nevastech.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.nevastech.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.nevastech.com\/blog\/#organization","name":"Nevas Technologies Insights","url":"https:\/\/www.nevastech.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.nevastech.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.nevastech.com\/blog\/wp-content\/uploads\/2022\/09\/nevas-tech-logo.png","contentUrl":"https:\/\/www.nevastech.com\/blog\/wp-content\/uploads\/2022\/09\/nevas-tech-logo.png","width":171,"height":50,"caption":"Nevas Technologies Insights"},"image":{"@id":"https:\/\/www.nevastech.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.nevastech.com\/blog\/#\/schema\/person\/4999a5a32569d9cb02ceb097d8bb6f9f","name":"John Solomon","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.nevastech.com\/blog\/wp-content\/uploads\/2026\/01\/Gemini_Generated_Image_85xsyk85xsyk85xs.png","url":"https:\/\/www.nevastech.com\/blog\/wp-content\/uploads\/2026\/01\/Gemini_Generated_Image_85xsyk85xsyk85xs.png","contentUrl":"https:\/\/www.nevastech.com\/blog\/wp-content\/uploads\/2026\/01\/Gemini_Generated_Image_85xsyk85xsyk85xs.png","caption":"John Solomon"},"sameAs":["https:\/\/www.nevastech.com\/"],"url":"https:\/\/www.nevastech.com\/blog\/author\/nevas_blog_author\/"}]}},"_links":{"self":[{"href":"https:\/\/www.nevastech.com\/blog\/wp-json\/wp\/v2\/posts\/3118","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.nevastech.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.nevastech.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.nevastech.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.nevastech.com\/blog\/wp-json\/wp\/v2\/comments?post=3118"}],"version-history":[{"count":2,"href":"https:\/\/www.nevastech.com\/blog\/wp-json\/wp\/v2\/posts\/3118\/revisions"}],"predecessor-version":[{"id":3122,"href":"https:\/\/www.nevastech.com\/blog\/wp-json\/wp\/v2\/posts\/3118\/revisions\/3122"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.nevastech.com\/blog\/wp-json\/wp\/v2\/media\/3119"}],"wp:attachment":[{"href":"https:\/\/www.nevastech.com\/blog\/wp-json\/wp\/v2\/media?parent=3118"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.nevastech.com\/blog\/wp-json\/wp\/v2\/categories?post=3118"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.nevastech.com\/blog\/wp-json\/wp\/v2\/tags?post=3118"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}