Page 9852 "Effective Permissions"

Base Application · System.Security.AccessControl · BC23-30 · source at ea08af5e · facts from BC29

Properties

Property	Value
Caption	Effective Permissions
SourceTable	Permission
PageType	Worksheet
UsageCategory	Administration
ApplicationArea	All

Fields on this page

Layout controls in source order, grouped by the container they sit in. Shows: the table field a control is bound to (or its expression as written); ToolTip: the control’s own, else the bound field’s (marked).

Group	Control	Shows	ToolTip
General	User	`ChosenUserName`	Specifies the user that the effective permissions apply to.
	Company	`CurrentCompanyName`	Specifies the company for which effective permissions for the chosen user will be shown.
	Show All Objects	`ShowAllObjects`	Specifies if the effective permissions are shown for all objects or only for objects in the user’s assigned permission sets.
EffectivePermissions	Object Type	`Rec."Object Type"`	Specifies the type of object that the permissions apply to in the current database.
	Object ID	`Rec."Object ID"`	Specifies the ID of the object to which the permissions apply.
	Object Name	`Rec."AL Object Name"`	—
	Read Permission	`Rec."Read Permission"`	Specifies information about whether the permission set has read permission to this object. The values for the field are blank, Yes, and Indirect. Indirect means permission only through another object. If the field is empty, the permission set does not have read permission.
	Insert Permission	`Rec."Insert Permission"`	Specifies information about whether the permission set has insert permission to this object. The values for the field are blank, Yes, and Indirect. Indirect means permission only through another object. If the field is empty, the permission set does not have insert permission.
	Modify Permission	`Rec."Modify Permission"`	Specifies information about whether the permission set has modify permission to this object. The values for the field are blank, Yes, and Indirect. Indirect means permission only through another object. If the field is empty, the permission set does not have modify permission.
	Delete Permission	`Rec."Delete Permission"`	Specifies information about whether the permission set has delete permission to this object. The values for the field are blank, Yes, and Indirect. Indirect means permission only through another object. If the field is empty, the permission set does not have delete permission.
	Execute Permission	`Rec."Execute Permission"`	Specifies information about whether the permission set has execute permission to this object. The values for the field are blank, Yes, and Indirect. Indirect means permission only through another object. If the field is empty, the permission set does not have execute permission.
	In User-Defined Permission Set	`ContainedInCustomPermissionSet`	Specifies if the object is included in a User-Defined permission set.
Content	ByPermissionSet	part Page 9853 “Effective Permissions By Set”	—

Actions

Group	Action	ToolTip	Runs
Processing	Permission Sets	View or edit which feature objects that users need to access and set up the related permissions in permission sets that you can assign to the users of the database.	Page 9802 “Permission Sets”
	Permission Set by User	View or edit the available permission sets and apply permission sets to existing users.	Page 9816 “Permission Set by User”

Events published

OnEffectivePermissionsPopulated(CurrUserId: Guid; CurrCompanyName: Text[30]; CurrObjectType: Integer; CurrObjectId: Integer) (integration)
- subscribers: Codeunit 1351 “Telemetry Subscribers” EffectivePermissionsFetchedInPage

Procedures

SetUserSID(UserSID: Guid)

Plus 1 local procedures.

Triggers

OnAfterGetCurrRecord, OnAfterGetRecord, OnInit, OnOpenPage

Calls

From the extracted call graph of BC29 (graphify-al on the snapshot checkout): calls whose target is known from a declared type or an Object::"Name" argument. Interface dispatch and calls through events are not counted, so the list is not complete.

Codeunit 9852 “Effective Permissions Mgt.” (3 calls: FillByObject → PopulateEffectivePermissionsBuffer, OnAfterGetCurrRecord → PopulatePermissionRecordWithEffectivePermissionsForObject, OnOpenPage → DisallowViewingEffectivePermissionsForNonAdminUsers)
Codeunit 457 “Environment Information” (1 call: FillByObject → IsSaaS)
Codeunit 8714 “Audit Log” (1 call: OnOpenPage → LogAuditMessage)

Recent changes

2026-09-30 #11989 [Bug 500351] Allow Effective Permissions for delegated admins and helpdesk (main, BC30, fix)
2026-08-28 #10579 [Bug 638696] Add teaching tip to Effective Permissions page 9852 (main, BC30, feature)

Ask your agent

Procedure bodies are not stored here (D10). The call sections above are our own, per object, from the BC29 call graph. For a procedure body or the calls of one procedure, ask bc-code-atlas (external, by Stefan Maron, MIT; default corpus w1-28), which the bc-observatory plugin connects: bcatlas_resolve_node(object_type: "page", object_name: "Effective Permissions"), then bcatlas_get_procedure_body or bcatlas_get_neighbors on the returned id.