Creating a system administrator security role without AOT access in AX 2012 R2

Hello everyone,

The system administrator role in AX 2012 provides access to all the components of AX. I came through a strange requirement for creating a role which will give access to all the process and forms from the user interface but can’t access the AOT. For this I followed the following process:

1. Create a role with name “SysAdminWithoutAot”
2. Now in the role components, we have: Duties, Privilages, Permissions, Sub roles.
3. Select all the privilages from Security->Duties. Drag and drop all the selected Duties into the Duties node of the role SysAdminWithoutAot.
4. Similarly do the same for privilages and subroles. (select all the privilages and roles and drag and drop them into the respective component nodes of SysAdminWithoutAot.</