I have some super users (local IT support) in my Global Core system, who I need to give access to see all other user sessions in the database.
I don’t want to give the SUPER role. What permissions do I need to give them?
I am not sure I understand you correct. You speaking about “sessions” here. How about the read permission for Table 2000000009? Does that help?
Or do you want to have ALL permissions you need to setup a user login?
If you want to users view session information in File → database Information
If I’m not in mistake you must add permissions to
System 1570 → File Database Information
And to virtual table 2000000009 – Sessions.
Another option that I have seen is to create a simple form to display data from 2000000009 without having permissions to see database information.
Yes I’m talking about the “sessions”. So thank you, I’ll try this.
But I actually have the same issue, I have an application where my country based super users can add permissions/roles to their local users. The adding permissions/roles works fine, but only as long as the AD user has already been added to the database. Even though I have given the users permission the the 2000000054 (Windows Login) table, then they cannot add records here. So here the users might need some special SQL permission??
To add users to database you need SQL Server role db_accessadmin
With SQL2005 and NAV 4.0 SP3 you also need to give the persons permission on SQL. But I beleive this is an error that will be fixed in future releases. For SQL2000 it is enough with the listed permissions inside NAV just like it should be.