---
id: object/codeunit/9855
type: object
title: Codeunit 9855 "Permission Set Relation"
summary: Codeunit 9855 "Permission Set Relation" in System Application (System.Security.AccessControl). 5 public procedures, 1 events. Present since at least BC23, still in BC30.
tier: official
language: en
tags:
  - codeunit
  - system application
versions:
  introduced: null
  last_changed: null
  deprecated: null
review:
  state: derived
  by: null
  at: null
  flags: []
generated:
  at: "2026-10-11T00:31:51.816Z"
  pipeline: 0.2.0
  prompts: {}
  input_hash: 09a78870d981ecb1c1a23e26e234d76b367059118cc1742f9c24b12aec8f9d6e
evidence:
  - kind: code
    url: https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/System%20Application/App/Permission%20Sets/src/PermissionSetRelation.Codeunit.al
    title: src/System Application/App/Permission Sets/src/PermissionSetRelation.Codeunit.al (releases/29.x)
    date: null
    commit: ea08af5ef2d6a9b5c5af4a029288abbe2c883220
    t: null
    quote: null
links:
  learn: []
  objects: []
  features: []
  topics: []
  localizations: []
  videos: []
  posts: []
  guidelines: []
object_type: codeunit
object_id: 9855
name: Permission Set Relation
namespace: System.Security.AccessControl
app: System Application
extends: null
first_version: "23"
last_version: "30"
present_in:
  - "23"
  - "24"
  - "25"
  - "26"
  - "27"
  - "28"
  - "29"
  - "30"
changed_in: []
source_major: "29"
obsolete: null
countries: []
ms_search_form_ids: []
counts:
  fields: 0
  procedures: 6
  events: 1
  subscribers: 0
relations:
  out: 0
  referenced_by: 0
  pages: 0
  extended_by: 0
  event_subscribers: 1
  calls: 2
  called_by: 4
  implements: 0
---

# Codeunit 9855 "Permission Set Relation"

> Codeunit 9855 "Permission Set Relation" in System Application (System.Security.AccessControl). 5 public procedures, 1 events. Present since at least BC23, still in BC30.

System Application · System.Security.AccessControl · BC23-30 · [source at ea08af5e](https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/System%20Application/App/Permission%20Sets/src/PermissionSetRelation.Codeunit.al) · facts from BC29

## Properties

| Property | Value |
|---|---|
| Access | Public |

## Events published

- `OnShowSecurityFilterForTenantPermission(var TenantPermission: Record "Tenant Permission"; var OutputSecurityFilter: Text)` (integration): Event that is raised to show security filter for a tenant permission.
  - subscribers: [Codeunit 9001 "Permission Pages Mgt."](../codeunit/9001.md) ShowSecurityFilterForTenantPermissionSystem

## Procedures

- `AddNewPermissionSetRelation(AppId: Guid; RoleId: Code[30]; Scope: Option System,Tenant; RelatedAppId: Guid; RelatedRoleId: Code[30]; RelatedScope: Option System,Tenant; PermissionType: Option Include,Exclude): Boolean`: Adds a new permission set relation.
- `OpenPermissionSetPage(Name: Text; RoleId: Code[30]; AppId: Guid; Scope: Option System,Tenant)`: Opens the permission set page for the specified role ID.
- `VerifyUserCanEditPermissionSet(AppId: Text)`: Verify that the user can edit permission sets, with the specified app ID. Throws an error if not.
- `CopyPermissionSet(NewRoleId: Code[30]; NewName: Text; SourceRoleId: Code[30]; SourceAppId: Guid; SourceScope: Option System,Tenant; CopyType: Enum "Permission Set Copy Type")`: CopyPermissionSet will copy the source permission set using the specified copy type.
- `LookupPermissionSet(AllowMultiselect: Boolean; var AggregatePermissionSet: Record "Aggregate Permission Set"): Boolean`: Opens the permission set page in lookup mode and assigns the selected record to specified Permission Set record.

## Calls

From the extracted call graph of BC29 (graphify-al on the snapshot checkout): calls whose target is known from a declared type or an `Object::"Name"` argument. Interface dispatch and calls through events are not counted, so the list is not complete.

- [Codeunit 9856 "Permission Set Relation Impl."](../codeunit/9856.md) (4 calls: `AddNewPermissionSetRelation → AddNewPermissionSetRelation`, `LookupPermissionSet → LookupAssignablePermissionSets`, `OpenPermissionSetPage → OpenPermissionSetPage`, …)
- [Codeunit 9863 "Permission Set Copy Impl."](../codeunit/9863.md) (1 call: `CopyPermissionSet → CopyPermissionSet`)

## Called by

- [Page 9859 "Tenant Permission Subform"](../page/9859.md) (3 calls: `OnDeleteRecord → VerifyUserCanEditPermissionSet`, `OnInsertRecord → VerifyUserCanEditPermissionSet`, `OnModifyRecord → VerifyUserCanEditPermissionSet`)
- [Codeunit 9822 "Plan Configuration Impl."](../codeunit/9822.md) (1 call: `LookupPermissionSet → LookupPermissionSet`)
- [Codeunit 9850 "Permission Set Card Subscriber"](../codeunit/9850.md) (1 call: `OnOpenPermissionSetCard → OpenPermissionSetPage`)
- [Table 9852 "Permission Buffer"](../table/9852.md) (1 call: `OpenPermissionsPage → OpenPermissionSetPage`)

## Across versions

- Present in: BC23-30
- Changed (declaration) in: none

Source: AL metadata extracted from the code (names, ids, signatures, properties); no code bodies (D10).

## Ask your agent

Procedure bodies are not stored here (D10). The call sections above are our own, per object, from the BC29 call graph. For a procedure body or the calls of one procedure, ask bc-code-atlas (external, by Stefan Maron, MIT; default corpus w1-28), which the bc-observatory plugin connects: `bcatlas_resolve_node(object_type: "codeunit", object_name: "Permission Set Relation")`, then `bcatlas_get_procedure_body` or `bcatlas_get_neighbors` on the returned id.