web
You’re offline. This is a read only version of the page.
close
Skip to main content

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Small and medium business | Business Central, N...
Suggested Answer

Limiting access

(6) ShareShare
ReportReport
Posted on by 48
We are using BC365 finance.  I want to limit access so certain users cannot have access to financial information such as GL account balances chart of accounts etc running financial reports. If they are posting a SO or invoice I’d like them to be able to view the GL entries. I know Incan give them a profile that doesn’t show these options but that doesn’t stop someone putting it in the search line.  What table data do I need to exclude ?
I have the same question (0)
  • Martin Dráb Profile Picture
    238,745 Most Valuable Professional on at
    Moved from Integration, Dataverse, and general topics forum to Small and medium business | Business Central, NAV, RMS forum.
  • Sumit Singh Profile Picture
    11,749 Super User 2026 Season 1 on at
     
    I think it's a duplicate query. Similar query raised in below link:- 
     
     
    Below link might help you:- 
     
     
    Please mark it "Verified" if it helps.
  • JB-22071942-0 Profile Picture
    48 on at
    The post to exclude chart of accounts was helpful however I also want to make sure that they cannot run any of the financial reports so access TB etc by excluding COA what else do I need to do ?
  • Suggested answer
    Khushbu Rajvi. Profile Picture
    21,573 Super User 2026 Season 1 on at
  • Suggested answer
    Gregory Mavrogeorgis Profile Picture
    901 Super User 2026 Season 1 on at
    Hi,
     
    Use permissions (not profiles).
    Grant only lean sales sets (e.g., D365 SALES DOC, EDIT/POST). Avoid ACCOUNTANT/BUS FULL.

    Block these TableData (no Read):
    • G/L Account
    • G/L Budget Entry
    • Acc. Schedule Name, Acc. Schedule Line
    • Column Layout Name, Column Layout
    • Analysis View, Analysis View Entry, Analysis View Budget Entry
    Allow drill-down (Read) + secure it:
    • G/L Entry → Read with Security Filter (e.g., Source Code IN (SALES,S-INV,S-CR.MEMO) and/or Document Type IN (Invoice,Credit Memo)).
    • Also Customer Ledger Entry and Detailed Cust. Ledger Entry → Read.
    Remove Execute on finance pages/reports:
    Chart of Accounts, Account Schedules/Financial Reports, G/L Budgets, Analysis by Dimension, Trial Balance/IS/BS reports.

    Quick test:
    • Effective Permissions: G/L Account = no Read, G/L Entry = Read (filtered).
    • From Posted Sales Invoice → Navigate → General Ledger Entries works.
    • Searching Chart of Accounts/Trial Balance is blocked.
     
    If you have found this helpful please mark it as verified
  • Suggested answer
    YUN ZHU Profile Picture
    98,231 Super User 2026 Season 1 on at
    Hi, If this is a question from BC365 finance, please submit it to the forum below.
     
    Thanks.
    ZHU
  • Suggested answer
    Jainam M. Kothari Profile Picture
    15,668 Super User 2026 Season 1 on at
    Hello,
     
    To restrict access to financial data in Business Central 365 Finance while allowing users to post transactions and view related GL entries, you should create custom permission sets that exclude direct access to key financial tables like G/L Account (15), G/L Register (45), and Account Schedules (84/85), and remove Execute permissions from financial reporting pages.
     
    For G/L Entry (17), grant Indirect Read so users can view entries linked to posted documents but not browse them freely.
     
    Use Security Filters to further limit visibility, and assign these permission sets directly to users to prevent them from accessing sensitive financial data via search or navigation.
     
     
  • Suggested answer
    Valentin Castravet Profile Picture
    31,986 Super User 2026 Season 1 on at
    The post to exclude chart of accounts was helpful however I also want to make sure that they cannot run any of the financial reports so access TB etc by excluding COA what else do I need to do ?
    Make sure their permissions don’t include access to these reports. The simplest approach is to copy their current permission set and remove the reports you don’t want them to access by using the exclude feature. 
     

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Introducing the 2026 Season 1 community Super Users

Congratulations to our 2026 Super Stars!

Congratulations to our 2025 Community Spotlights

Thanks to all of our 2025 Community Spotlight stars!

Leaderboard > Small and medium business | Business Central, NAV, RMS

#1
OussamaSabbouh Profile Picture

OussamaSabbouh 2,055 Super User 2026 Season 1

#2
YUN ZHU Profile Picture

YUN ZHU 1,063 Super User 2026 Season 1

#3
Dhiren Nagar Profile Picture

Dhiren Nagar 1,014 Super User 2026 Season 1

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans