To Set Up Role Assignment for Domain Users

When a Microsoft Active Directory (AD) domain user signs in to MYOB Advanced for the first time, the system adds a user account for this user and assigns roles to the new account based on the mapping between AD groups and MYOB Advanced roles. For the full integration procedure, see Integration with Active Directory.

You can override the automatically assigned roles of a particular domain user by selecting the required roles manually for the user on the Users (SM201010) form, for example, if you want the user to access additional MYOB Advanced forms.

To Override a User's Role Assignment Based on AD Groups

1. Open the Users (SM201010) form.
2. Optional: If the user has never signed in to MYOB Advanced with his or her domain credentials, add a local user account for the domain user as follows:
   1. On the form toolbar, click Add Active Directory User to open the Active Directory User dialog box.
   2. In the Active Directory User box, select the AD user account.
   3. Click OK to close the dialog box and populate the form with the user's information.
3. In the Login box, select the user whose default roles you want to change.
4. In the Selection area, select Override Active Directory Roles with Local Roles.
5. On the Roles tab, select the roles you want to assign to the user.
6. On the form toolbar, click Save.

To Restore AD Group Role Assignment for Domain Users

1. Open the Users (SM201010) form.
2. In the Login box, select the domain user for whom you want to restore the default roles.
3. In the Selection area, clear Override Active Directory Roles with Local Roles.
4. On the form toolbar, click Save.