Entitlements and permissions
Entitlements and permissions in Business Central: how license-based entitlements, permissions and permission sets differ, how the license plans are structured, and what the special permission sets (SUPER, D365 BASIC, SYSTEM APP) provide. It answers questions about access control and licensing.
Path: Administration > Entitlements and permissions · tier official · system administration · narrative reviewed (checked by Opus)
Overview
This section covers how access to Business Central is controlled. Entitlements come from the license, permissions are assigned by an administrator, and permission sets are logical groups of permissions. The overview page explains these terms and includes upgrade considerations from versions prior to 18.0.
The licensing page describes the plans: Essentials, Premium, Team Member and External Accountant, along with entitlements, user groups and device licenses. The special permission sets page defines sets such as SUPER, SECURITY, LOGIN, D365 BASIC, SYSTEM APP - BASIC and SYSTEM APP - ADMIN, and the access each gives.
Start with the overview to learn the concepts, then read the licensing page to see which plan grants which entitlements. Use the special permission sets page as a reference when assigning or troubleshooting access.
Key points
- Entitlements are license-based access, permissions are assigned by administrators, and permission sets are logical groups of permissions.
- Permission sets have scopes, and include system permission sets and user-defined permission sets; AL object permissions are also covered.
- The overview includes upgrade considerations from versions prior to 18.0.
- License plans covered: Essentials, Premium, Team Member and External Accountant.
- Licensing also covers user groups and device licenses.
- Licensing page references 2020 release wave 2, 2022 release wave 1, version 17.0 and version 25.0.
- Special permission sets include SUPER, SECURITY, LOGIN, D365 BASIC, SYSTEM APP - BASIC and SYSTEM APP - ADMIN.
Learn pages
- Entitlements and permission sets overview: Learn about the different built-in methods to control which users can do what so that you can design the Business Central permission sets more precisely.
- Licensing in Business Central: Provides an overview of the licensing in Business Central
- Special permission sets: Learn about built-in permissions sets that carry special meaning in Business Central.
Videos and posts
Linked by a Haiku matcher with a grounding quote from the item’s summary (link/topics.ts); machine-generated.
- Dynamics 365 Business Central – Why when I create new users do they get full access by default (community post): “edit the licence, turn on Customise Permissions and delete permission sets”
- Dynamics 365 Business Central – A Closer look at the Free “Internal Administrator” and “Dynamics 365 Administrator” Licences (community post): “The Internal Administrator licence is given automatically to Microsoft 365 Global Administrators”
Source: Microsoft Learn (CC BY 4.0). Descriptions are Learn’s own.