web
You’re offline. This is a read only version of the page.
close
Skip to main content

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Small and medium business | Business Central, N...
Suggested Answer

Permission Sets

(3) ShareShare
ReportReport
Posted on by 454
We are re-doing our permission sets to be more restrictive. I am trying to create a base permission set that just gets a user logged in and on the role center, but am struggling to do that. What is the best way to go about this? Is there an already existing bare bones permission set like this that I am overlooking?
I have the same question (0)
  • Suggested answer
    Ramesh Kumar Profile Picture
    7,547 Super User 2026 Season 1 on at
    Hi,
     
    Their are multiple ways to you it.
     
    Option — 1
     
    Assign D365 BASIC which will help user to do basic things like login and view the role center page
     
    Option — 2 Search Profile and create and start recording by clicking Customize pages and assign it user.
     
     
    Thanks
    Ramesh
     
    If this was helpful, please check the "Does this answer your question?" box and mark it as verified.
     
     
  • Suggested answer
    YUN ZHU Profile Picture
    99,090 Super User 2026 Season 1 on at
    Hi, hope the following can give you some hints.
    Dynamics 365 Business Central: LOGIN Permission Set (Minimal permission set for log-in)
     
    Thanks.
    ZHU
  • Gerardo Rentería García Profile Picture
    25,555 Most Valuable Professional on at

    Hi, good day
    I hope this can help you, and give you some hints.

    Special permission sets - Business Central | Microsoft Learn

    Demystifying User Access: Mastering Permissions in Business Central

    Best Regards
    Gerardo

  • Suggested answer
    Sohail Ahmed Profile Picture
    11,169 Super User 2026 Season 1 on at

    Hope this might be helpful:

    To create a bare-bones permission set for login and Role Center access, use the Permission Recorder.

    • Create an empty custom permission set (e.g., BASE LOGIN).
    • Assign only this new set and D365 BASIC to a test user.
    • Start the recorder on your custom permission set.
    • Log in as the test user, allow the Role Center to load, then log out.
    • Stop the recorder and apply permissions.
    • Review the recorded permissions; they represent the minimum required.

    Reference: https://learn.microsoft.com/en-us/dynamics365/business-central/dev-itpro/administration/administration-special-permission-sets?wt.mc_id=MVP_354389

     

    ✅ Mark this answer as verified if it helps you.

  • Suggested answer
    Mansi Soni Profile Picture
    8,951 Super User 2026 Season 1 on at
    Hello, 

    Hope this will help you as well!

    https://learn.microsoft.com/en-us/dynamics365/business-central/ui-define-granular-permissions
     
    Permission set Definition
    SUPER Can read, use, update, and delete all data and all application objects in the scope of your license. Business Central requires that at least one user is assigned this permission set in each database.

    The first user created is automatically assigned the SUPER Permission Set

    You can't modify permissions for the SUPER permission set.

    Running a synchronization of users from Microsoft 365 using the Update Users from Microsoft 365 guide, requires the SUPER permission set.
    SUPER (DATA) Can read, use, update, and delete all data in the scope of your license. You typically assign this permission set to an accounting manager who needs to work with all data but doesn't need to change Business Central.
    SECURITY Manage the permission sets that are assigned to your account. When assigned this permission set, you can:
    • Create new users and assign them any permission set that is also assigned to your account.
    • Remove a permission set from a user as long as the permission set is also assigned to your account.
    • Modify individual permission granted by a permission set as long as the permission set is also assigned to your account.
    The idea behind this permission set is to prohibit you from granting users more permissions than you have. The permission set is useful for SUPER users or administrators who want to delegate permission management to team administrators. For example, a sales manager can assign permissions in sales area to sales people, sales assistant, sales coordinator, and so on.
    BASIC Grants Read access to almost all application tables and all system tables.

    The main purpose of this permission set is to enable the service to open and show all pages.

    Note: This permission set is available only for Business Central on-premises.
    D365 BASIC Grants Read access to almost all application tables and all system tables.

    The main purpose of this permission set is to enable the service to open and show all pages.
    FOUNDATION UI A prerequisite for all other permission sets. The FOUNDATION permission set grants access to system tables and application setup tables that are required for most application features to work. Note: This permission set is recommended when using the UI Elements Removal feature to automatically remove UI elements according to user permissions. For more information, see Removing Elements from the User Interface According to Permissions.

    Note: This permission set is available only for Business Central on-premises.
    SYSTEM APP - BASIC Grants access to most features of the system application and is required for sign in to Business Central.
    SYSTEM APP - ADMIN Grants full permissions to all features of the System Application.
    LOGIN Grants the minimum permissions to application and system objects that needed to sign in to Business Central. Use the permission set to allow users to sign in to Business Central without accidentally granting them permissions beyond those required by their tasks. By granting this permission set, the user will always be able to sign in.

    Note: This permission set doesn't grant access to a Role Center. It only allows the user to sign in to Business Central.
    USERGROUP Note: This permission set is deprecated in Business Central online. Use the SECURITY permission set instead.

    This permission set allows you to manage memberships and permissions for users in user groups in Business Central on-premises.


    Regards,
    Mansi Soni

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Introducing the 2026 Season 1 community Super Users

Congratulations to our 2026 Super Stars!

Meet the Microsoft Dynamics 365 Contact Center Champions

We are thrilled to have these Champions in our Community!

Congratulations to the March Top 10 Community Leaders

These are the community rock stars!

Leaderboard > Small and medium business | Business Central, NAV, RMS

#1
OussamaSabbouh Profile Picture

OussamaSabbouh 1,993 Super User 2026 Season 1

#2
YUN ZHU Profile Picture

YUN ZHU 1,116 Super User 2026 Season 1

#3
Khushbu Rajvi. Profile Picture

Khushbu Rajvi. 557 Super User 2026 Season 1

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans