Page 9883 "Permissions Overview"

Base Application · System.Security.AccessControl · BC28-30 · source at ea08af5e · facts from BC29

Properties

Property	Value
Caption	Permissions Overview
SourceTable	Expanded Permission
PageType	List
UsageCategory	Administration
ApplicationArea	Basic, Suite
Permissions	tabledata “NAV App Installed App” = r

Fields on this page

Layout controls in source order, grouped by the container they sit in. Shows: the table field a control is bound to (or its expression as written); ToolTip: the control’s own, else the bound field’s (marked).

Group	Control	Shows	ToolTip
ObjectFilters	Object Type	`ObjTypeFilter`	Specifies object type filter.
	Object ID	`ObjIDFilter`	Specifies the object ID filter.
RoleIDFilterGroup	Permission Set	`RoleIDFilter`	Specifies the permission set filter.
ScopeFilters	Scope	`ScopeFilter`	Specifies the scope filter.
	Extension Name	`AppNameFilter`	Specifies the extension name filter. This will filter for permission sets included in the extension.
Permissions	Permission Set	`Rec."Role ID"`	Specifies the ID of the permission set that exist in the current database. This field is used internally.
	RoleName	`Rec."Role Name"`	Specifies the name of the permission set.
	ObjectType	`Rec."Object Type"`	Specifies the type of object that the permissions apply to in the current database.
	ObjectID	`Rec."Object ID"`	Specifies the ID of the object the permission applies to.
	ObjectName	`Rec."Object Name"`	Specifies the name of the object the permission applies to.
	ReadPermission	`Rec."Read Permission"`	Specifies if the permission set has read permission to this object. The values for the field are blank, Yes, and Indirect. Indirect means permission only through another object. If the field is empty, the permission set does not have read permission.
	InsertPermission	`Rec."Insert Permission"`	Specifies if the permission set has insert permission to this object. The values for the field are blank, Yes, and Indirect. Indirect means permission only through another object. If the field is empty, the permission set does not have insert permission.
	ModifyPermission	`Rec."Modify Permission"`	Specifies if the permission set has modify permission to this object. The values for the field are blank, Yes, and Indirect. Indirect means permission only through another object. If the field is empty, the permission set does not have modify permission.
	DeletePermission	`Rec."Delete Permission"`	Specifies if the permission set has delete permission to this object. The values for the field are blank, Yes, and Indirect. Indirect means permission only through another object. If the field is empty, the permission set does not have delete permission.
	ExecutePermission	`Rec."Execute Permission"`	Specifies if the permission set has execute permission to this object. The values for the field are blank, Yes, and Indirect. Indirect means permission only through another object. If the field is empty, the permission set does not have execute permission.
	SecurityFilter	`Rec."Security Filter"`	Specifies a security filter that applies to this permission set to limit the access that this permission set has to the data contained in this table.
	Scope	`PermSetScope`	Specifies the scope of the permission set.
	Extension Name	`AppName`	Specifies the name of the extension which defined the permission set.
FactBoxes	Security Groups	part Page 9884 “Permission Set Security Groups”	—
	Users	part Page 9885 “Permission Set Users”	—

Actions

Group	Action	ToolTip	Runs
Navigation	Permission Set Permissions	View or edit the permissions in the permission set.

Procedures

SetInitialRoleIDFilter(NewRoleIDFilter: Text[30]) + BC29: Sets the initial Role ID filter to apply when the page opens.
SetInitialObjectFilter(NewObjTypeFilter: Option None,"Table Data","Table",,"Report",,"Codeunit","XMLport",MenuSuite,"Page","Query",System; NewObjIDFilter: Text) + BC29: Sets the initial object type and ID filters to apply when the page opens.

Plus 10 local procedures.

Triggers

OnAfterGetRecord, OnAfterGetCurrRecord, OnOpenPage

Calls

From the extracted call graph of BC29 (graphify-al on the snapshot checkout): calls whose target is known from a declared type or an Object::"Name" argument. Interface dispatch and calls through events are not counted, so the list is not complete.

Codeunit 9031 “Security Group” (2 calls: LoadPermAssignmentBuffer → GetGroups, LoadPermAssignmentBuffer → GetMembers)

Recent changes

2026-07-20 #8947 [Permissions] Add Where-Used and Permissions Overview navigation actions (main, BC30, feature)

Documented on Microsoft Learn

Define granular permissions

Source: AL metadata extracted from the code (names, ids, signatures, properties); no code bodies (D10).

Ask your agent

Procedure bodies are not stored here (D10). The call sections above are our own, per object, from the BC29 call graph. For a procedure body or the calls of one procedure, ask bc-code-atlas (external, by Stefan Maron, MIT; default corpus w1-28), which the bc-observatory plugin connects: bcatlas_resolve_node(object_type: "page", object_name: "Permissions Overview"), then bcatlas_get_procedure_body or bcatlas_get_neighbors on the returned id.