---
id: object/page/9862
type: object
title: Page 9862 "Expanded Permissions"
summary: Page 9862 "Expanded Permissions" in System Application (System.Security.AccessControl). Present since at least BC23, still in BC30.
tier: official
language: en
tags:
  - page
  - system application
versions:
  introduced: null
  last_changed: null
  deprecated: null
review:
  state: derived
  by: null
  at: null
  flags: []
generated:
  at: "2026-10-11T00:31:51.816Z"
  pipeline: 0.2.0
  prompts: {}
  input_hash: 185d923f413132c7a376e4a1401b547dd44ce02cfc8e4bfbd8f19a366e9cea3f
evidence:
  - kind: code
    url: https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/System%20Application/App/Permission%20Sets/src/ExpandedPermissions.Page.al
    title: src/System Application/App/Permission Sets/src/ExpandedPermissions.Page.al (releases/29.x)
    date: null
    commit: ea08af5ef2d6a9b5c5af4a029288abbe2c883220
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/ui-define-granular-permissions
    title: Define granular permissions
    date: null
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/ui-legacy-user-groups
    title: Manage permissions through user groups (legacy)
    date: null
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/ui-security-groups
    title: Control Access Using Security Groups
    date: null
    commit: null
    t: null
    quote: null
links:
  learn:
    - https://learn.microsoft.com/dynamics365/business-central/ui-define-granular-permissions
    - https://learn.microsoft.com/dynamics365/business-central/ui-legacy-user-groups
    - https://learn.microsoft.com/dynamics365/business-central/ui-security-groups
  objects: []
  features: []
  topics:
    - topic/business-central/development-and-administration/administration-tasks-in-business-central/manage-access-to-business-central
    - topic/business-central/development-and-administration/administration-tasks-in-business-central/manage-access-to-business-central/grant-user-permissions
    - topic/dev-itpro/development/troubleshooting/troubleshooting-in-the-client
    - topic/dev-itpro/integration/integrating-with-infrastructure-services
  localizations: []
  videos: []
  posts: []
  guidelines: []
object_type: page
object_id: 9862
name: Expanded Permissions
namespace: System.Security.AccessControl
app: System Application
extends: null
first_version: "23"
last_version: "30"
present_in:
  - "23"
  - "24"
  - "25"
  - "26"
  - "27"
  - "28"
  - "29"
  - "30"
changed_in: []
source_major: "29"
obsolete: null
countries: []
ms_search_form_ids:
  - docs/learn-smb-docs/business-central/ui-define-granular-permissions.md
  - docs/learn-smb-docs/business-central/ui-legacy-user-groups.md
  - docs/learn-smb-docs/business-central/ui-security-groups.md
counts:
  fields: 0
  procedures: 0
  events: 0
  subscribers: 0
  controls: 10
  actions: 0
relations:
  out: 0
  referenced_by: 0
  pages: 0
  extended_by: 0
  event_subscribers: 0
  calls: 1
  called_by: 0
  implements: 0
---

# Page 9862 "Expanded Permissions"

> Page 9862 "Expanded Permissions" in System Application (System.Security.AccessControl). Present since at least BC23, still in BC30.

System Application · System.Security.AccessControl · BC23-30 · [source at ea08af5e](https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/System%20Application/App/Permission%20Sets/src/ExpandedPermissions.Page.al) · facts from BC29

## Properties

| Property | Value |
|---|---|
| Caption | Expanded Permissions |
| SourceTable | Expanded Permission |
| PageType | List |

## Fields on this page

Layout controls in source order, grouped by the container they sit in. Shows: the table field a control is bound to (or its expression as written); ToolTip: the control's own, else the bound field's (marked).

| Group | Control | Shows | ToolTip |
|---|---|---|---|
| Permissions | Object Type | `Rec."Object Type"` | Specifies the type of object that the permissions apply to in the current database. |
|  | Object ID | `Rec."Object ID"` | Specifies the ID of the object to which the permissions apply. |
|  | Object Name | `ObjectName` | Specifies the name of the object to which the permissions apply. |
|  | Object Caption | `ObjectCaption` | Specifies the caption of the object that the permissions apply to. |
|  | Read Permission | `Rec."Read Permission"` | Specifies if the permission set has read permission to this object. |
|  | Insert Permission | `Rec."Insert Permission"` | Specifies if the permission set has insert permission to this object. |
|  | Modify Permission | `Rec."Modify Permission"` | Specifies if the permission set has modify permission to this object. |
|  | Delete Permission | `Rec."Delete Permission"` | Specifies if the permission set has delete permission to this object. |
|  | Execute Permission | `Rec."Execute Permission"` | Specifies if the permission set has execute permission to this object. |
|  | Security Filter | `Rec."Security Filter"` | Specifies a security filter that applies to this permission set to limit the access that this permission set has to the data contained in this table. |

## Triggers

OnAfterGetRecord

## Calls

From the extracted call graph of BC29 (graphify-al on the snapshot checkout): calls whose target is known from a declared type or an `Object::"Name"` argument. Interface dispatch and calls through events are not counted, so the list is not complete.

- [Codeunit 9864 "Permission Impl."](../codeunit/9864.md) (1 call: `OnAfterGetRecord → GetObjectCaptionAndName`)

## Across versions

- Present in: BC23-30
- Changed (declaration) in: none

## Documented on Microsoft Learn

- [Define granular permissions](https://learn.microsoft.com/dynamics365/business-central/ui-define-granular-permissions)
- [Manage permissions through user groups (legacy)](https://learn.microsoft.com/dynamics365/business-central/ui-legacy-user-groups)
- [Control Access Using Security Groups](https://learn.microsoft.com/dynamics365/business-central/ui-security-groups)

Source: AL metadata extracted from the code (names, ids, signatures, properties); no code bodies (D10).

## Ask your agent

Procedure bodies are not stored here (D10). The call sections above are our own, per object, from the BC29 call graph. For a procedure body or the calls of one procedure, ask bc-code-atlas (external, by Stefan Maron, MIT; default corpus w1-28), which the bc-observatory plugin connects: `bcatlas_resolve_node(object_type: "page", object_name: "Expanded Permissions")`, then `bcatlas_get_procedure_body` or `bcatlas_get_neighbors` on the returned id.