if possible, you need to have your sql server administrators change the production account from the network service account to an actual domain account. The network service account usually has minimal permissions to run in sql server. While great for demo environments, I'd avoid this on a production environment.
Plus, as you can see from this article, if SQL and the Dynamics AX AOS, are on separate machines, that you should not be using the network service.
technet.microsoft.com/.../dd362055.aspx
Instead, I would configure a domain account and use that for the AOS.
Anyway, thankfully, you can fix this by going on the production server and adding the 'showplan' permission to the network service account if you can't change it (and the AOS and SQL Server are on the same machine).