How to Effectively Migrate User Groups to Security Groups?

(5) Share

Report

Posted on by AH-08050951-0

Hi,

Apologies if this question has been asked before.

We have customer who is on BC v23 On-Premise and we would like to upgrade them to the latest BC version On-Premise. Part of the process entails converting the User Groups to Security Groups. This customer has over 80 companies in their LIVE environment and we are starting a test conversion in one of their SANDBOX environments.

1.) So far, for the test, we have created all the security groups, which have synced with the directory.

2.) We then copied the permission sets from the user groups to the corresponding security groups.

3.) The problem is how security groups doesn't separate the permissions access for users per company, if you copy it over, the default is blank - which means users have access to ALL 80 companies.

Is there a way to do a bulk migration from User Groups to Security Groups, INCLUDING the appropriate company access for users?

It is not very practical to go in manually and create a security group per company and manually assign the company access? This is what I'm seeing on most of the forums.

Please, if anyone can help us with ideas to bulk automate this process, we would be very grateful.

Categories:

Dynamics 365 Business Central

I have the same question (0)

All responses (4)

Answers (3)

Sort by

Verified answer

Aman Kakkar 3,532 Super User 2026 Season 1 on at

Like (4)

Report
Copy link

Link copied!

Hi,

It looks like you’ll need to write some AL Code to handle the bulk import, especially if you want to include company-specific access during the migration. Business Central doesn’t provide an out-of-the-box way to migrate User Groups to Security Groups with company scoping.

You can refer to these links for guidance and examples:

Migrate from User Groups to Permission Sets or Security Groups - Business Central | Microsoft Learn

https://www.youtube.com/watch?v=CrJcG4pgXx8

Hope it helps.

Aman K

1 people found this reply helpful.

Was this reply helpful? Yes No
Verified answer

YUN ZHU 101,600 Super User 2026 Season 1 on at

Like (3)

Report
Copy link

Link copied!

Hi, Table 2000000053 "Access Control" is a system table and cannot be imported through the Configuration Package. I think this can only be done through customization.

Hope this helps.

Thanks.

ZHU

1 people found this reply helpful.

Was this reply helpful? Yes No
Verified answer

Pallavi Phade 5,683 Super User 2026 Season 1 on at

Like (1)

Report
Copy link

Link copied!

Namaste @AH-08050951-0

We also had expereince same issue for one of our customers who migrated to Version 26.

Access control table has all information but it cannot be exported .

We had done import using Customization .

1) Create Security Groups same code as User Groups for identification

2) Created Custom Table similar to Access Control

3) Pushed all the Table for Backup

3 )Write script to Push the data from Access Control where user ID is matching with user ID and passed all permssions to user security , user wise .

Please execute this in sandbox .

If you feel this helped , Please mark as "Verified"

Regards

Pallavi Phade

1 people found this reply helpful.

Was this reply helpful? Yes No
Suggested answer

Rishabh Kanaskar 6,227 Super User 2026 Season 1 on at

Like (2)

Report
Copy link

Link copied!

Hi,

There’s no built-in way to bulk migrate User Groups to Security Groups with company-specific permissions. Security Groups in BC apply permissions globally, not per company, so when you copy permissions, the company field defaults to blank (all companies).
Options:

> Use User Group to Security Group Migration Tool (available in Admin Center for SaaS, but limited for On-Prem).
> For On-Prem, you need a custom script or AL code to replicate company-specific permissions from User Group Members to Security Group Members.
> Alternatively, keep using User Groups for company-specific access, as Security Groups are designed for global permissions.

In short: No standard bulk migration with company filters exists, you’ll need customization or manual setup.

Thanks

Rishabh

Was this reply helpful? Yes No