---
id: object/table/9009
type: object
title: Table 9009 "Permission Set Buffer"
summary: Table 9009 "Permission Set Buffer" in Base Application (System.Security.AccessControl). 6 fields, 4 public procedures. Present since at least BC23, still in BC30, changed in BC24, BC28.
tier: official
language: en
tags:
  - table
  - base application
versions:
  introduced: null
  last_changed: "28"
  deprecated: null
review:
  state: derived
  by: null
  at: null
  flags: []
generated:
  at: "2026-10-11T00:31:51.816Z"
  pipeline: 0.2.0
  prompts: {}
  input_hash: 3b35e9f907a2f88bc09151f046fa55ceadad9b2e44254db6f3a246827b2dc3c5
evidence:
  - kind: code
    url: https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/Layers/W1/BaseApp/System/Permissions/PermissionSetBuffer.Table.al
    title: src/Layers/W1/BaseApp/System/Permissions/PermissionSetBuffer.Table.al (releases/29.x)
    date: null
    commit: ea08af5ef2d6a9b5c5af4a029288abbe2c883220
    t: null
    quote: null
links:
  learn:
    - https://learn.microsoft.com/dynamics365/business-central/ui-define-granular-permissions
    - https://learn.microsoft.com/dynamics365/business-central/ui-legacy-user-groups
    - https://learn.microsoft.com/dynamics365/business-central/ui-security-groups
  objects: []
  features: []
  topics:
    - topic/business-central/development-and-administration/administration-tasks-in-business-central/manage-access-to-business-central
    - topic/business-central/development-and-administration/administration-tasks-in-business-central/manage-access-to-business-central/grant-user-permissions
    - topic/dev-itpro/development/troubleshooting/troubleshooting-in-the-client
    - topic/dev-itpro/integration/integrating-with-infrastructure-services
  localizations: []
  videos: []
  posts: []
  guidelines: []
object_type: table
object_id: 9009
name: Permission Set Buffer
namespace: System.Security.AccessControl
app: Base Application
extends: null
first_version: "23"
last_version: "30"
present_in:
  - "23"
  - "24"
  - "25"
  - "26"
  - "27"
  - "28"
  - "29"
  - "30"
changed_in:
  - "24"
  - "28"
source_major: "29"
obsolete: null
countries: []
ms_search_form_ids: []
counts:
  fields: 6
  procedures: 4
  events: 0
  subscribers: 0
relations:
  out: 0
  referenced_by: 0
  pages: 2
  extended_by: 0
  event_subscribers: 0
  calls: 1
  called_by: 0
  implements: 0
---

# Table 9009 "Permission Set Buffer"

> Table 9009 "Permission Set Buffer" in Base Application (System.Security.AccessControl). 6 fields, 4 public procedures. Present since at least BC23, still in BC30, changed in BC24, BC28.

Base Application · System.Security.AccessControl · BC23-30 · [source at ea08af5e](https://github.com/microsoft/BCApps/blob/ea08af5ef2d6a9b5c5af4a029288abbe2c883220/src/Layers/W1/BaseApp/System/Permissions/PermissionSetBuffer.Table.al) · facts from BC29

Learn documents this table through its pages: [Page 9802 "Permission Sets"](../page/9802.md) (3 Learn pages).

## Properties

| Property | Value |
|---|---|
| Caption | Permission Set Buffer |
| DataClassification | CustomerContent |

## Fields

Explanation: the field's ToolTip in the code; without one, the ToolTip of a page control bound to the field (marked via the page); without that, its Caption (marked caption) when that differs from the name.

| No. | Name | Type | Explanation | Notes |
|---|---|---|---|---|
| 1 | Scope | Option | — | OptionCaption: System,Tenant; DataClassification SystemMetadata |
| 2 | App ID | Guid | — | DataClassification SystemMetadata |
| 3 | Role ID | Code[20] | Specifies the name of the permission set. | DataClassification SystemMetadata |
| 4 | Name | Text[30] | Specifies the description of the record. | DataClassification SystemMetadata |
| 5 | App Name | Text[250] | Specifies the name of the extension. | DataClassification SystemMetadata |
| 6 | Type | Option | Specifies if the permission set is defined by your organization, the base application, or an extension. You can only edit or delete permission sets that you have created. | OptionCaption: User-Defined,Extension,System; DataClassification SystemMetadata |

## Keys

- Key1: Type, Role ID (clustered)

## Procedures

- `SetType()`
- `GetType(ScopeOpt: Option; AppID: Guid): Integer`
- `FillRecordBuffer()`
- `RenameTenantPermissionSet()`

## Pages and codeunits on this table

- [Page 9802 "Permission Sets"](../page/9802.md) (source table)
- [Page 9851 "Permission Set List"](../page/9851.md) (source table)

## Calls

From the extracted call graph of BC29 (graphify-al on the snapshot checkout): calls whose target is known from a declared type or an `Object::"Name"` argument. Interface dispatch and calls through events are not counted, so the list is not complete.

- [Codeunit 9001 "Permission Pages Mgt."](../codeunit/9001.md) (1 call: `RenameTenantPermissionSet → DisallowEditingPermissionSetsForNonAdminUsers`)

## Across versions

- Present in: BC23-30
- Changed (declaration) in: BC24, BC28

Source: AL metadata extracted from the code (names, ids, signatures, properties); no code bodies (D10).

## Ask your agent

Procedure bodies are not stored here (D10). The call sections above are our own, per object, from the BC29 call graph. For a procedure body or the calls of one procedure, ask bc-code-atlas (external, by Stefan Maron, MIT; default corpus w1-28), which the bc-observatory plugin connects: `bcatlas_resolve_node(object_type: "table", object_name: "Permission Set Buffer")`, then `bcatlas_get_procedure_body` or `bcatlas_get_neighbors` on the returned id.