Hello Experts,
I’m trying to configure a permission set in Business Central for one specific user.
The requirement is to give them access to Sales-related tasks plus a few restricted Admin capabilities, without giving full SUPER permission.
Required Access:
Sales
- Create Sales Price Master
- Create Sales Orders
- Post Delivery
- Post sales Invoices
Limited Admin
- Manage Users
- Manage Roles
- Manage Profiles
- I created a custom permission set for the Sales tasks — this works correctly.
- For the Admin tasks, I attempted to use the Permission Recorder, but it didn’t capture all required permissions (especially for Users, Roles, Profiles).
- I want to avoid assigning broad permissions like SUPER or D365 BASIC, which grant access to other modules (Finance, Purchase, etc.).
- The user should have only the permissions listed above.
- They should not access other modules like Purchase, Finance, Warehouse, etc.
- I need a reliable way to grant only the limited Admin functionality.
- How can I correctly configure a permission set that allows only these restricted Admin tasks (Users / Roles / Profiles)?
- What is the best practice for assigning limited permissions for specific roles?
For example, if I want to give a user only Purchase + Inventory permissions, should I:
Record permissions manually using Permission Recorder? Clone standard permission sets and restrict them? Build a new custom permission set from scratch?
Any suggestions, guidance, or examples of recommended permission structure would be greatly appreciated.
Thanks in advance!


Report
All responses (
Answers (