In Fastpath Assure the Segregation of Duties (SoD) module pulls user access in NAV, reviewing and reporting conflicts for mitigation.
Segregation of duties may be important for regulation compliance, but it should also be the basis for NAV security. SoD conflict reports show where your risks are and allow you to mitigate conflicts. Instead of spending time trying to create your own ruleset, the SoD module in Fastpath Assure allows you to use our custom-built ruleset designed by auditors specifically for NAV (Navision). Fastpath Assure allows you to create on demand and automated SoD reporting, taking away the manual process.
Knowing where risks exist is a great start, but the next step is to know who exactly has this access. You may have numerous employees with conflicting access, but either risk tolerance or mitigation can't stop someone who shouldn't have access in the first place. Fastpath Assure allows you to run automated access reviews as well to assist in eliminating unauthorized or orphaned users in your Dynamics NAV system.
Role Conflicts
The Fastpath Assure Identity Manager module securely automates user provisioning from request to application, without the need for IT involvement.
When creating, editing, and deleting users; don’t lose the integrity of your Dynamics NAV security. If user change requests are taking a long time to go through manual approvals and lack visibility into SoD conflicts during user creation, use Identity Manager (IDM) to automate your process. IDM gives a business process owner the power to submit user requests with the exact roles and permissions needed. IDM can run the request against our segregation of duties tool to immediately report any conflicts. Once submitted, the request, with the SoD report, goes through a customizable workflow of approvals based on the user, role, application, or risk level.
Another issue many organizations face is the disconnect
Role Assignment
Most Dynamics NAV users know they can track changes made to the system with the
If you are tired of searching the Dynamics NAV Change log trying to understand where changes were made, then the Fastpath Assure Audit Trail is for you. Audit Trail has out-of-the-box reporting showing the before and after value, who made the change, and the source of the change (at the NAV or SQL level). Another benefit of Audit Trail is that it sits outside of NAV, minimizing system impact.
View the Audit Trail vs Change Log Comparison Chart.
Data Changes
In Fastpath Assure, the Identity Manager module improves access requests and approvals, including the automation of start and end dates.
Sometimes projects arise, employees go on vacation, or something must be done after hours, and these instances cause the need to grant emergency or temporary access to a user. When needed, you should be able to grant this access quickly without sacrificing security, but in most cases, the manual approval process for access requests in NAV doesn't allow for both speed and risk aversion.
With Fastpath's Identity Manager (IDM) you can easily make access change requests and automate the approval process for quicker deployment. IDM lets you set a start and end
Schedule Access
Whether running security reviews or preparing for an audit, one difficulty can be figuring out which reports are vital and what they need to contain. Creating reports from scratch can take hours and subsequently increase the cost of the entire process. With this in mind, Fastpath includes customizable reports built for the specific needs of Dynamics NAV. Our team of certified internal auditors know what to look for and designed the report templates to include the data necessary for most instances.
Within Fastpath Assure, the Access Review module includes reports for critical access definitions and the SoD module has a user conflict summary. Audit Trail maintains a data management log, tracking archive, purge, and restore commands. Identity Manager includes reports to track the full history of requests and approvals, a necessary review for SOX compliance. These reports and more can be customized to fit exactly what you or your auditors need.
Schedule Access
Sarbanes-Oxley regulations are complex, but there are ways to simplify it. In this short E-book, Norman Marks focuses on simplifying your controls and other considerations when choosing your GRC software.
GRC 20/20 Research, LLC (GRC 20/20) provides clarity of insight into governance, risk management, and compliance (GRC) solutions and strategies through objective market research, benchmarking, training, and analysis. Read their report on Fastpath Assure®, the security and compliance platform which won their "Innovation in User Experience for Automated Controls" Award in 2017!
Building roles and implementing strong security in D365FO can be a daunting task, so we created a tool to assist in designing security roles for Dynamics 365 for Finance and Operations.
Whether you know the importance of access controls or not, implementing and maintaining them can still be a difficult part of your SAP security plan. The audit and security expert, Keith Goldschmidt, goes over what access controls are, how SAP handles them, how you should implement and maintain them, and even suggests some tools to make the process easier on you.
Security. Audit. Compliance. 
