Skip to content
BC 2026 release wave 2unofficial launch event map, by waldo

Features › Admin and platform

Permission set for HQ read access

GA · 1 min in 1 video · dev relevance medium · not in the documented features baseline (docs checked 2026-10-02)

Permission set for HQ read access

A purpose-designed permission set with read access to default tables is assigned to the app user in the source.

Area: Admin and platform. Status: GA. Developer relevance: medium. Airtime: 1 min across 1 video, demoed.

Status evidence

  • Nothing said about status; launch event convention: generally available unless stated otherwise.

Where they talk about it

Quotes

  • 6:31 "if you add more tables than the default ones, then you need to create a new permission set" - Custom synchronized tables need extra read permissions set up by the HQ admin.
  • 6:50 "So, this way the admin has control of who reads what." - Summarizes the security model: the HQ admin decides which subsidiaries read which data.

Caveats mentioned

  • Added tables beyond the default ones need a new permission set with read permissions

Prerequisites mentioned

  • Entra user for the app in the source environment

Documented features match

  • No documented item matched. Not documented

Docs checked on 2026-10-02: the match is against Microsoft's what's new pages for the wave as they were on that date. Microsoft keeps filling the documentation, so "no documented item" can go stale. The wider product documentation on learn.microsoft.com was searched for this feature on the same date; the feature's data lists an article when one was found.

Tags: permissions, security, mdm, admin

Generated by pipeline step 06. Source: YouTube auto-captions of the launch event videos, see the deep links. Not official.