Grant user permissions

Path: Development and administration > Administration tasks in Business Central > Manage access to Business Central > Grant user permissions · tier official · system administration · narrative reviewed (checked by Opus)

Overview

This section covers how administrators give users access in Business Central. It has two pages: one for creating users and tying them to licenses, and one for building granular permission sets.

“Create users according to licenses” explains creating users, assigning permission sets, managing licenses, and configuring permissions based on license types, for Business Central online and on-premises. It also covers security groups, user groups and delegated admin.

“Define granular permissions” describes creating permission sets with read, insert, modify, delete and execute access levels for database objects. It also covers indirect permissions, security filters and record-level access control, and importing and exporting permissions.

Key points

• Administrators create users and assign permission sets, with permissions configured according to license type.
• The user creation page covers Business Central online and on-premises.
• License assignment, security groups, user groups and delegated admin are covered in the user creation page.
• Custom permission sets can set read, insert, modify, delete and execute access on database objects.
• Indirect permissions are part of defining granular permission sets.
• Security filters provide record-level access control.
• Permissions can be imported and exported.

Learn pages

• Create users according to licenses: Describes how to add users to Business Central online or on-premises based on licenses.
• Define granular permissions: This article describes how to define granular permissions and assign each user the permission sets that they need to do their jobs.

Videos, posts and code changes

Linked by a Haiku matcher with a grounding quote from the item’s summary (link/topics.ts); machine-generated.

• #10579 [Bug 638696] Add teaching tip to Effective Permissions page 9852 (code change): “teaching tip to the Effective Permissions page to explain what effective permissions are”
• #10991 [Main]Cannot Rename User Due to Financial Report Audit Log Permissions - Copy (code change): “User Management now correctly updates Financial Report Audit Log”
• #11561 [Permissions] Fix read-only error in obsolete permission cleanup (code change): “Remove Obsolete Permissions action now deletes only from the Tenant Permission table”
• #9599 Add event subscriber for OpenPermissionSetPage (code change): “enables programmatic opening of the permission set details card based on client signals”
• #9692 Fix effective permission filtering (code change): “Permission buffer population prioritizes exact object IDs over wildcard object ID 0”
• Dynamics 365 Business Central – Why when I create new users do they get full access by default (community post): “New users get default permissions from their security groups and from the licence they are assigned”
• What’s Cooking in Business Central: Replace Permission Sets Upon Import (video): “Replace permission sets upon import; Import permission sets action”

Business Central pages and reports

The pages, reports and queries this hub’s Learn pages name (ms.search.form, API reference), joined to the code by exact object id (data/index/docs-objects.json); a page shows the table it runs on.

• Page 119 “User Setup” · on Table 91 “User Setup”
• Page 774 “User Details” · captioned “Users” · on Table 774 “User Details”
• Page 6300 “Azure AD App Setup Wizard” · captioned “Set Up Microsoft Entra ID”
• Page 6301 “Azure AD App Setup Part” · captioned “” · on Table 6300 “Azure AD App Setup”
• Page 6302 “Azure AD Access Dialog” · captioned “Microsoft Entra service permissions”
• Page 8930 “Email View Policy List” · captioned “User Email View Policies” · on Table 8930 “Email View Policy”
• Page 9061 “Plan Configuration List” · captioned “License Configuration” · on Table 9017 “Plan Configuration”
• Page 9062 “User Security Activities” · on Table 9062 “User Security Status”
• Page 9069 “Plan Configuration Card” · captioned “License Configuration” · on Table 9017 “Plan Configuration”
• Page 9800 “Users”
• Page 9802 “Permission Sets” · on Table 9009 “Permission Set Buffer”
• Page 9807 “User Card”
• Page 9808 “User Permission Sets”
• Page 9816 “Permission Set by User”
• Page 9818 “User Security Status List” · captioned “User Security Status” · on Table 9062 “User Security Status”
• Page 9855 “Permission Set” · on Table 9862 “PermissionSet Buffer”
• Page 9862 “Expanded Permissions”
• Page 9865 “Permission Lookup List” · on Table 9865 “Permission Lookup Buffer”
• Page 9874 “Permission Set By Sec. Group” · captioned “Permission Set by Security Group”
• Page 9878 “Permission Set Lookup List” · captioned “Permission Set Lookup” · on Table 9862 “PermissionSet Buffer”
• Page 9883 “Permissions Overview”

Learn also names 4 objects with no object page: page/9173, page/9830, page/9831, page/9838.

Source: Microsoft Learn (CC BY 4.0). Descriptions are Learn’s own.