---
id: topic/dev-itpro/security-privacy-and-compliance/security
type: topic
title: Security
summary: Security in Business Central covers online tenant security, multifactor authentication, encryption, network restrictions with service tags, record-level security filters, and persona-based guidance. It answers questions about protecting data, controlling access, and securing online and on-premises deployments.
tier: official
language: en
review:
  state: reviewed
  by: opus
  at: "2026-10-07T02:18:03.160Z"
  flags: []
generated:
  at: "2026-10-08T00:04:31.553Z"
  pipeline: 0.2.0
  prompts:
    hub-topic: 1
  input_hash: 2fe35cbb7d99620ddc73fe8e89c61701e7d8e624a3c9e01fddd2fe8c58f05900
evidence:
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/deployment/configure-ssl-web-client-connection
    title: Configuring SSL to Secure the Web Client Connection
    date: "2021-04-01"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/ui-how-users-permissions
    title: Create users according to licenses
    date: "2026-07-16"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/transparent-data-encryption
    title: Data Encryption at Rest, Transparent Data Encryption, and BitLocker
    date: "2025-06-20"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/Setting-Database-Owner-and-Security-Administration-Permissions
    title: Granting permissions to manage databases
    date: "2024-10-26"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/enhancing-server-instance-security
    title: Hardening Business Central Server Security
    date: "2024-09-09"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-application
    title: Layered security model in Business Central
    date: "2025-11-19"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/multifactor-authentication
    title: Multifactor authentication (MFA) for Business Central
    date: "2023-11-13"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/developer/devenv-permissions-on-database-objects
    title: Permissions on Objects
    date: "2025-06-02"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-faq
    title: Security FAQ for Business Central
    date: "2025-12-11"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-online
    title: Security in Business Central
    date: "2026-01-14"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-onpremises
    title: Security in Business Central (on-premises)
    date: "2021-04-01"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-scenarios-guide
    title: Security scenarios Guide by Persona
    date: "2025-12-16"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-users
    title: Security Tips for Business Users
    date: "2025-12-04"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-service-tags
    title: Use Azure security service tags
    date: "2025-07-16"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/deployment/implement-security-certificates-production-environment
    title: Using Security Certificates with Business Central on-premises
    date: "2024-12-20"
    commit: null
    t: null
    quote: null
  - kind: learn
    url: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/Security-Filters
    title: Using Security Filters
    date: "2025-10-14"
    commit: null
    t: null
    quote: null
links:
  learn:
    - https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/multifactor-authentication
    - https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-faq
    - https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-online
    - https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-scenarios-guide
    - https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-users
    - https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-service-tags
    - https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/Security-Filters
  objects:
    - object/page/119
    - object/page/774
    - object/page/6300
    - object/page/6301
    - object/page/6302
    - object/page/8930
    - object/page/9061
    - object/page/9062
    - object/page/9069
    - object/page/9800
    - object/page/9807
    - object/page/9808
    - object/page/9816
    - object/page/9818
    - object/page/9874
  features: []
  topics:
    - topic/dev-itpro/security-privacy-and-compliance
    - topic/dev-itpro/security-privacy-and-compliance/security/application-security
    - topic/dev-itpro/security-privacy-and-compliance/security/on-premises
  localizations: []
  videos: []
  posts: []
  guidelines: []
learn_toc_path:
  - Security, privacy, and compliance
  - Security
toc_file: dev-itpro/TOC.md
parent: topic/dev-itpro/security-privacy-and-compliance
children:
  - topic/dev-itpro/security-privacy-and-compliance/security/application-security
  - topic/dev-itpro/security-privacy-and-compliance/security/on-premises
coverage:
  learn: 16
  code: 15
  video: 0
  blog: 0
  guideline: 0
bc_forms:
  - 119
  - 774
  - 6300
  - 6301
  - 6302
  - 8930
  - 9061
  - 9062
  - 9069
  - 9173
  - 9800
  - 9807
  - 9808
  - 9816
  - 9818
  - 9830
  - 9831
  - 9838
  - 9874
member_hash: d519ea8b503860e042701e7390c435611a58450489f9bde8c6099f58fc22a397
narrative: generated
---

# Security

> Security in Business Central covers online tenant security, multifactor authentication, encryption, network restrictions with service tags, record-level security filters, and persona-based guidance. It answers questions about protecting data, controlling access, and securing online and on-premises deployments.

Path: [Security, privacy, and compliance](../security-privacy-and-compliance.md) > Security · tier official · system none · narrative reviewed (checked by Opus)

## Overview

This section explains how Business Central is secured, mainly for online (cloud) tenants. It covers authentication, access control, data protection, encryption, Privileged Identity Management, and auditing. Specific pages cover multifactor authentication through Microsoft Entra ID, Azure service tags for network filtering, and security filters for record-level access.

Guidance is split by audience. The persona guide gives recommendations to partners, administrators, developers, and auditors. The business user tips page covers separation of duties, approval workflows, and shared devices. The FAQ answers questions on data isolation, penetration testing, cipher suites, and incident management.

Two subtopics go deeper. Application security covers the layered security model, users and licenses, and permission sets. On-premises security covers authentication, server hardening, certificates, and database encryption. Start with "Security in Business Central" for the overall picture, then move to the page that fits your role or deployment.

## Key points

- The online security overview covers Conditional Access, data isolation, Transparent Data Encryption, customer-managed encryption keys, and Customer Lockbox.
- MFA through Microsoft Entra ID supports phone calls, text messages, mobile app notifications, and one-time passwords, with conditional access policies.
- The Dynamics365BusinessCentral Azure service tag lets you control firewall and network security group rules for traffic to Business Central.
- Security filters limit table data at record level and are created through permission sets. The SecurityFiltering property sets filtered, validated, ignored, or disallowed behavior.
- The persona guide covers Privileged Identity Management, GDAP group-based access, Federated Identity Credentials, certificate-based authentication, and Azure Key Vault.
- Business user tips cover separation of duties, approval workflows, out-of-band verification, kiosk sign-out, and private browsing.
- The security FAQ covers data isolation, penetration testing, RSA-CBC cipher support, and security incident management.
- Subtopics cover application security (users, licenses, AL permission sets) and on-premises security (SSL/HTTPS, X.509 certificates, TDE, BitLocker, SQL Server permissions).

## Subtopics

- [Application security](security/application-security.md) (3 pages)
- [On-premises](security/on-premises.md) (6 pages)

## More Learn pages

- [Multifactor authentication (MFA) for Business Central](https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/multifactor-authentication): This article explains how to add multifactor authentication (MFA) when your solution uses Microsoft Entra ID as authentication mechanism.
- [Security FAQ for Business Central](https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-faq): Find useful links and other answers to frequently asked questions about security in Dynamics 365 Business Central.
- [Security in Business Central](https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-online): Learn about the main aspects of security in your online deployment of Dynamics 365 Business Central.
- [Security scenarios Guide by Persona](https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-scenarios-guide): Practical security scenarios and best practices for partners, administrators, auditors, and developers working with Dynamics 365 Business Central.
- [Security Tips for Business Users](https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-users): Learn essential security tips for business users to protect devices and data in Business Central. Discover best practices for safe browsing, MFA, and more.
- [Use Azure security service tags](https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/security-service-tags): List of Azure service tags for Dynamics 365 Business Central
- [Using Security Filters](https://learn.microsoft.com/dynamics365/business-central/dev-itpro/security/Security-Filters): Learn how you can configure security filters at different levels in your Business Central solution so that you can limit access to data.

## Business Central pages and reports

The pages, reports and queries this hub's Learn pages name (ms.search.form, API reference), joined to the code by exact object id (data/index/docs-objects.json); a page shows the table it runs on.

- [Page 119 "User Setup"](../../../objects/page/119.md) · on [Table 91 "User Setup"](../../../objects/table/91.md) · via [Application security](security/application-security.md)
- [Page 774 "User Details"](../../../objects/page/774.md) · captioned "Users" · on [Table 774 "User Details"](../../../objects/table/774.md) · via [Application security](security/application-security.md)
- [Page 6300 "Azure AD App Setup Wizard"](../../../objects/page/6300.md) · captioned "Set Up Microsoft Entra ID" · via [Application security](security/application-security.md)
- [Page 6301 "Azure AD App Setup Part"](../../../objects/page/6301.md) · captioned "<Microsoft Entra application Setup Part>" · on [Table 6300 "Azure AD App Setup"](../../../objects/table/6300.md) · via [Application security](security/application-security.md)
- [Page 6302 "Azure AD Access Dialog"](../../../objects/page/6302.md) · captioned "Microsoft Entra service permissions" · via [Application security](security/application-security.md)
- [Page 8930 "Email View Policy List"](../../../objects/page/8930.md) · captioned "User Email View Policies" · on [Table 8930 "Email View Policy"](../../../objects/table/8930.md) · via [Application security](security/application-security.md)
- [Page 9061 "Plan Configuration List"](../../../objects/page/9061.md) · captioned "License Configuration" · on [Table 9017 "Plan Configuration"](../../../objects/table/9017.md) · via [Application security](security/application-security.md)
- [Page 9062 "User Security Activities"](../../../objects/page/9062.md) · on [Table 9062 "User Security Status"](../../../objects/table/9062.md) · via [Application security](security/application-security.md)
- [Page 9069 "Plan Configuration Card"](../../../objects/page/9069.md) · captioned "License Configuration" · on [Table 9017 "Plan Configuration"](../../../objects/table/9017.md) · via [Application security](security/application-security.md)
- [Page 9800 "Users"](../../../objects/page/9800.md) · via [Application security](security/application-security.md)
- [Page 9807 "User Card"](../../../objects/page/9807.md) · via [Application security](security/application-security.md)
- [Page 9808 "User Permission Sets"](../../../objects/page/9808.md) · via [Application security](security/application-security.md)
- [Page 9816 "Permission Set by User"](../../../objects/page/9816.md) · via [Application security](security/application-security.md)
- [Page 9818 "User Security Status List"](../../../objects/page/9818.md) · captioned "User Security Status" · on [Table 9062 "User Security Status"](../../../objects/table/9062.md) · via [Application security](security/application-security.md)
- [Page 9874 "Permission Set By Sec. Group"](../../../objects/page/9874.md) · captioned "Permission Set by Security Group" · via [Application security](security/application-security.md)

Learn also names 4 objects with no object page: page/9173, page/9830, page/9831, page/9838.

Source: Microsoft Learn (CC BY 4.0). Descriptions are Learn's own.