All resources
Template or tool

D365 Security Role Design and Segregation of Duties Matrix

Design Dynamics 365 F&O security roles, define segregation of duties rules with mitigating controls, and approve user role assignments in one workbook.

Free

Free Excel workbook. Design Dynamics 365 F&O security roles, define segregation of duties rules with mitigating controls, and approve user role assignments in one workbook. Download it, add your project details and use it today: no sign-up for software, no paywall.

A practical security design workbook for Dynamics 365 Finance and Supply Chain Management. The Role Catalog records each role's origin, personas, duties added or removed, data scope, expected license type, owner and build status, with a calculated review date. The SoD Rules sheet captures conflicting duty pairs, risk, whether the rule is configured in Dynamics 365, and the mitigating control, and flags high-risk rules that are uncontrolled. The User Role Assignment sheet tracks approvals, conflict resolution and recertification dates. The summary gives security leads and auditors a clear view of design progress and control coverage.

What's inside

  • Role Catalog: Every security role in the solution: what it is based on, what it covers, and where it is in the build cycle.
  • SoD Rules: Pairs of duties one person should not hold together. Configure High-risk rules in Dynamics 365.
  • User Role Assignment: Who gets which roles in which legal entities, and how any SoD conflict is resolved.
  • Summary: key numbers calculated automatically from your data
  • Drop-down lists, worked example rows and formulas you can rely on

How to use it

  1. Start from standard roles. List personas and the standard role each one maps to, then decide per role: use as is, copy and adjust, or build custom. Avoid modifying standard roles directly.
  2. Record duties added or removed for each role. Use the exact duty names from System administration > Security > Security configuration; the names in the examples are illustrative.
  3. With finance, internal audit and process owners, list conflicting duty pairs on SoD Rules, rate the risk and agree a mitigating control for each.
  4. Configure high-risk rules in System administration > Security > Segregation of duties > Segregation of duties rules, then validate duties and roles against each rule.
  5. Capture user role assignments by legal entity, record any rule hit and its resolution, and get approval from the role owner before assigning in production.
  6. Test every role in UAT with real users signed in under that role, and update Status as roles move from Built to Tested and In production.
  7. Recertify access on the dates shown and keep the workbook as audit evidence alongside the standard security reports.

Who it's for

Functional consultants, business analysts, key users and project leads working on Microsoft Dynamics 365 Finance & Operations, plus anyone moving into D365 from another ERP.

Let's connect

I'm Pranshu Shubham, a Microsoft Dynamics 365 F&O Solution Architect and PMP-certified program lead with 8+ years of ERP and AI transformation across the USA, Europe and APAC. I created this resource from real project experience, and I'd love to hear how you use it.