BC Observatoryunofficial, made by waldo
code change · fixAdministration & Setupofficial - Microsoftreviewed - checked by Opus

#11561 [Permissions] Fix read-only error in obsolete permission cleanup

The Remove Obsolete Permissions action now deletes only from the Tenant Permission table instead of the read-only system Permission table, ensuring cleanup works correctly on SaaS infrastructure.

Open in Claude11561.mdPull request #11561

Pull request · merged into main (BC30) on 2026-09-23 by darjoo · 2 files (+137 -22), 1 AL · fix · tier official · reviewed (checked by Opus)

What changed

  • Cleanup is now tenant-only, affecting both user-defined and extension-owned permission sets
  • System permissions remain untouched on all environments
  • Action no longer attempts to modify the read-only Permission table on SaaS
  • Tooltip and result messages updated to reflect tenant scope
  • Tests updated to write only to tenant permissions
  • Behaviour changes for users or extensions.

AL objects touched

Context

  • Work items: AB#581176
  • Labels: Team: Integrations
  • Systems: administration

Source: metadata of a merged pull request in microsoft/BCApps (bcapps): title, labels, changed paths and counts, with a summary in our words. No source text and no description beyond one short quote (D10, D61).