---
id: post/thedynamicsexplorer-com/37042
type: post
title: Dynamics 365 Business Central – Why when I create new users do they get full access by default
summary: New users in Business Central automatically receive full access to their first company based on their assigned license. Administrators can prevent this by modifying permission sets in the License Configuration page.
tier: community
language: en
tags:
  - user permissions
  - license configuration
  - access control
  - security
  - user setup
system: administration
review:
  state: reviewed
  by: opus
  at: "2026-10-08T01:56:52.157Z"
  flags: []
generated:
  at: "2026-10-08T01:26:53.141Z"
  pipeline: 0.2.0
  prompts:
    extract-post: 1
  input_hash: b864d086b389bf68bedcd054d18e6ace2176dc1515cf0901ccbdd86c67d6b45f
evidence:
  - kind: blog
    url: https://thedynamicsexplorer.com/2026/02/09/dynamics-365-business-central-why-when-i-create-new-users-do-they-get-full-access-by-default/
    title: Dynamics 365 Business Central – Why when I create new users do they get full access by default
    date: "2026-02-09"
    commit: null
    t: null
    quote: null
  - kind: blog
    url: https://thedynamicsexplorer.com/2026/02/09/dynamics-365-business-central-why-when-i-create-new-users-do-they-get-full-access-by-default/
    title: Dynamics 365 Business Central – Why when I create new users do they get full access by default
    date: "2026-02-09"
    commit: null
    t: null
    quote: Now when I create a new user that's been assigned this licence they won't have full access.
links:
  learn: []
  objects: []
  features: []
  topics: []
  localizations: []
  videos: []
  posts: []
  guidelines: []
post_id: "37042"
source_id: thedynamicsexplorer-com
source_name: The Dynamics Explorer
url: https://thedynamicsexplorer.com/2026/02/09/dynamics-365-business-central-why-when-i-create-new-users-do-they-get-full-access-by-default/
published_at: "2026-02-09T10:30:00.000Z"
author: Gavin Whittaker
full_text: false
words: 381
quotes:
  - text: Now when I create a new user that's been assigned this licence they won't have full access.
    why_it_matters: Demonstrates the practical outcome of modifying license configuration to enforce principle of least privilege
code_objects_mentioned:
  - page Licence Configuration
systems:
  - administration
  - platform
versions_mentioned: []
preview:
  embeddable: true
  frame_url: https://thedynamicsexplorer.com/2026/02/09/dynamics-365-business-central-why-when-i-create-new-users-do-they-get-full-access-by-default/embed/
  image: https://i0.wp.com/thedynamicsexplorer.com/wp-content/uploads/2026/02/licence-configuration.png?fit=1200%2C675&ssl=1
  image_alt: null
  image_w: 1200
  image_h: 675
  site_name: null
  favicon: https://s1.wp.com/i/favicon.ico?m=1713425267i
  probed_at: "2026-10-07T11:50:40.358Z"
---

# Dynamics 365 Business Central – Why when I create new users do they get full access by default

[Read the post](https://thedynamicsexplorer.com/2026/02/09/dynamics-365-business-central-why-when-i-create-new-users-do-they-get-full-access-by-default/) · The Dynamics Explorer (Gavin Whittaker) · 2026-02-09 · 381 words · tier community · reviewed (checked by Opus)

> New users in Business Central automatically receive full access to their first company based on their assigned license. Administrators can prevent this by modifying permission sets in the License Configuration page.

## Key points

- New users get default permissions from their security groups and from the licence they are assigned
- By default a licence such as Business Central Essential grants full access to the first company a user logs into
- In the Licence Configuration page, edit the licence, turn on Customise Permissions and delete permission sets such as D365 BUS FULL ACCESS
- Partner access can be controlled the same way by editing the Delegated Admin agent - Partner licence

## Quotes

- "Now when I create a new user that's been assigned this licence they won't have full access." (Demonstrates the practical outcome of modifying license configuration to enforce principle of least privilege)

## AL objects mentioned

As named in the post. A name that matches one object page by exact type and name links to it; the others stay as named.

- page "Licence Configuration"

Not found in BC28-30: page "Licence Configuration".

## Context

- Features: License Configuration, Permission Set Management, Default User Permissions, User Access Control

Source: The Dynamics Explorer, community blog. Summary, key points and quotes are derived (CONTENT-NOTICE.md); read the original for the full text.