---
id: object/page/9859
type: object
title: Page 9859 "Tenant Permission Subform"
summary: Page 9859 "Tenant Permission Subform" in System Application (System.Security.AccessControl). 2 public procedures. Present since at least BC23, still in BC30, changed in BC26.
tier: official
language: en
tags:
  - page
  - system application
versions:
  introduced: null
  last_changed: "26"
  deprecated: null
review:
  state: derived
  by: null
  at: null
  flags: []
generated:
  at: "2026-10-11T00:31:51.816Z"
  pipeline: 0.2.0
  prompts: {}
  input_hash: e88bc7818cbd94a47442fd4bbec6f0ea631d68217608f7ff4b2a253d926f1541
evidence:
  - kind: code
    url: https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/System%20Application/App/Permission%20Sets/src/TenantPermissionSubForm.page.al
    title: src/System Application/App/Permission Sets/src/TenantPermissionSubForm.page.al (releases/29.x)
    date: null
    commit: ea08af5ef2d6a9b5c5af4a029288abbe2c883220
    t: null
    quote: null
links:
  learn: []
  objects: []
  features: []
  topics: []
  localizations: []
  videos: []
  posts: []
  guidelines: []
object_type: page
object_id: 9859
name: Tenant Permission Subform
caption: Permissions
namespace: System.Security.AccessControl
app: System Application
extends: null
first_version: "23"
last_version: "30"
present_in:
  - "23"
  - "24"
  - "25"
  - "26"
  - "27"
  - "28"
  - "29"
  - "30"
changed_in:
  - "26"
source_major: "29"
obsolete: null
countries: []
ms_search_form_ids: []
counts:
  fields: 0
  procedures: 5
  events: 0
  subscribers: 0
  controls: 13
  actions: 20
relations:
  out: 0
  referenced_by: 0
  pages: 0
  extended_by: 0
  event_subscribers: 0
  calls: 4
  called_by: 0
  implements: 0
---

# Page 9859 "Tenant Permission Subform"

> Page 9859 "Tenant Permission Subform" in System Application (System.Security.AccessControl). 2 public procedures. Present since at least BC23, still in BC30, changed in BC26.

System Application · System.Security.AccessControl · captioned "Permissions" · BC23-30 · [source at ea08af5e](https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/System%20Application/App/Permission%20Sets/src/TenantPermissionSubForm.page.al) · facts from BC29

## Properties

| Property | Value |
|---|---|
| Caption | Permissions |
| SourceTable | Tenant Permission |
| PageType | ListPart |

## Fields on this page

Layout controls in source order, grouped by the container they sit in. Shows: the table field a control is bound to (or its expression as written); ToolTip: the control's own, else the bound field's (marked).

| Group | Control | Shows | ToolTip |
|---|---|---|---|
| Permissions | Permission Set | `Rec."Role ID"` | Specifies the permission set. |
|  | Permission Set Name | `Rec."Role Name"` | Specifies the name of the permission set. |
|  | Type | `Rec.Type` | Specifies the type of permission. |
|  | Object Type | `Rec."Object Type"` | Specifies the type of object that the permissions apply to in the current database. |
|  | Object ID | `Rec."Object ID"` | Specifies the ID of the object to which the permissions apply. |
|  | Object Name | `ObjectName` | Specifies the name of the object to which the permissions apply. |
|  | Object Caption | `ObjectCaption` | Specifies the caption of the object that the permissions apply to. |
|  | Read Permission | `ReadPermissionAsTxt` | Specifies if the permission set has read permission to this object. |
|  | Insert Permission | `InsertPermissionAsTxt` | Specifies if the permission set has insert permission to this object. |
|  | Modify Permission | `ModifyPermissionAsTxt` | Specifies if the permission set has modify permission to this object. |
|  | Delete Permission | `DeletePermissionAsTxt` | Specifies if the permission set has delete permission to this object. |
|  | Execute Permission | `ExecutePermissionAsTxt` | Specifies if the permission set has execute permission to this object. |
|  | Security Filter | `Rec."Security Filter"` | Specifies a security filter that applies to this permission set to limit the access that this permission set has to the data contained in this table. |

## Actions

| Group | Action | ToolTip | Runs |
|---|---|---|---|
| Processing | Select Objects | Add two or more objects. |  |
|  | Add Read Permission to Related Tables | Add read access to tables that are related to the selected tables. |  |
| Allow Read | Yes | Allow access to read data in the object. |  |
|  | No | Disallow access to read data in the object. |  |
|  | Indirect | Allow access to read data in the object if there is read access to a related object. |  |
| Allow Insert | Yes | Allow access to insert data in the object. |  |
|  | No | Disallow access to insert data in the object. |  |
|  | Indirect | Allow access to insert data in the object if there is insert access to a related object. |  |
| Allow Modify | Yes | Allow access to modify data in the object. |  |
|  | No | Disallow access to modify data in the object. |  |
|  | Indirect | Allow access to modify data in the object if there is modify access to a related object. |  |
| Allow Delete | Yes | Allow access to delete data in the object. |  |
|  | No | Disallow access to delete data in the object. |  |
|  | Indirect | Allow access to delete data in the object if there is delete access to a related object. |  |
| Allow Execute | Yes | Allow access to execute functions in the object. |  |
|  | No | Disallow access to execute functions in the object. |  |
|  | Indirect | Allow access to execute functions in the object if there is execute access to a related object. |  |
| Allow All | Yes | Allow access to perform all actions in the object. |  |
|  | No | Disallow access to perform all actions in the object. |  |
|  | Indirect | Allow access to perform all actions in the object if there is full access to a related object. |  |

## Procedures

- `SetPermissionSet(RoleId: Code[30]; AppId: Guid; Tenant: Boolean)` (internal)
- `SetPermissionSetRelation(var PermissionSetRelationImplVar: Codeunit "Permission Set Relation Impl.")` (internal)

Plus 3 local procedures.

## Triggers

OnAfterGetCurrRecord, OnAfterGetRecord, OnDeleteRecord, OnInsertRecord, OnModifyRecord, OnNewRecord, OnInit

## Calls

From the extracted call graph of BC29 (graphify-al on the snapshot checkout): calls whose target is known from a declared type or an `Object::"Name"` argument. Interface dispatch and calls through events are not counted, so the list is not complete.

- [Codeunit 9864 "Permission Impl."](../codeunit/9864.md) (7 calls: `OnAfterGetCurrRecord → UpdatePermissionLine`, `OnAfterGetRecord → UpdatePermissionLine`, `OnInsertRecord → EmptyIrrelevantPermissionFields`, …)
- [Codeunit 9855 "Permission Set Relation"](../codeunit/9855.md) (3 calls: `OnDeleteRecord → VerifyUserCanEditPermissionSet`, `OnInsertRecord → VerifyUserCanEditPermissionSet`, `OnModifyRecord → VerifyUserCanEditPermissionSet`)
- [Codeunit 8703 "Feature Telemetry"](../codeunit/8703.md) (2 calls: `OnInsertRecord → LogUptake`, `OnModifyRecord → LogUptake`)
- [Codeunit 9856 "Permission Set Relation Impl."](../codeunit/9856.md) (1 call: `RefreshTreeView → RefreshPermissionSets`)

## Across versions

- Present in: BC23-30
- Changed (declaration) in: BC26

Source: AL metadata extracted from the code (names, ids, signatures, properties); no code bodies (D10).

## Ask your agent

Procedure bodies are not stored here (D10). The call sections above are our own, per object, from the BC29 call graph. For a procedure body or the calls of one procedure, ask bc-code-atlas (external, by Stefan Maron, MIT; default corpus w1-28), which the bc-observatory plugin connects: `bcatlas_resolve_node(object_type: "page", object_name: "Tenant Permission Subform")`, then `bcatlas_get_procedure_body` or `bcatlas_get_neighbors` on the returned id.