BC Observatoryunofficial, made by waldo
code change · fixAL Developmentofficial - Microsoftreviewed - checked by Opus

#11996 Restrict expense configuration maintenance to admins

Restrict configuration maintenance for expense management to administrators by removing write permissions from the Expense Mgmt. Edit permission set and granting them only through Expense Mgmt. Admin.

Open in Claude11996.mdPull request #11996

Pull request · merged into main (BC30) on 2026-09-29 by encimita · 3 files (+12 -8), 2 AL · fix · tier official · reviewed (checked by Opus)

What changed

  • Remove insert, modify, and delete permissions for Expense User, Expense Team, and Expense Approval Setup from Expense Mgmt. Edit
  • Grant configuration permissions exclusively through Expense Mgmt. Admin permission set
  • Prevent standard users (D365 BASIC, D365 TEAM MEMBER) from modifying expense setup while preserving their ability to edit expense reports
  • Employee synchronization continues using scoped inherent permissions
  • Add test coverage for the permission separation
  • Behaviour changes for users or extensions.

AL objects touched

Context

  • Work items: AB#648885
  • Labels: AL: Apps (W1), Team: Finance
  • Systems: development
  • From the description: “Remove direct insert, modify, and delete permissions for Expense User, Expense Team, and Expense Approval Setup from Expense Mgmt. Edit.”

Source: metadata of a merged pull request in microsoft/BCApps (bcapps): title, labels, changed paths and counts, with a summary in our words. No source text and no description beyond one short quote (D10, D61).