Small and medium business | Business Central, N...

Control Posting Permissions

(3) Share

Report

Posted on by peter fun

801

I have the following requirements in Microsoft Dynamics 365 Business Central and need guidance on how to manage them through permissions:

Requirement 1:

User can create and post Purchase Invoices

User can create and post Purchase Invoices against receipts

User should NOT be able to create or post Purchase Order

Requirement 2:

User can create and post Payment Journals
User can create General Journals and Fixed Asset G/L Journals, but should NOT be able to post them

Since multiple journals use the same table (Table 81 – Gen. Journal Line), how can I restrict posting only for specific journals while allowing posting for the Payment Journal?

Any recommended approach or best practice would be appreciated.

Categories:

Dynamics 365 Business Central

Dynamics 365 Business Central migration

Microsoft Dynamics RMS

Microsoft Dynamics NAV

I have the same question (0)

All responses (6)

Answers (0)

Sort by

Suggested answer

YUN ZHU 100,644 Super User 2026 Season 1 on at

Like (1)

Report
Copy link

Link copied!

Hi, Use the Record permission feature to view the posted codeunit IDs and then exclude them.

More details:

Dynamics 365 Business Central: How to create or modify permissions by recording your actions (Record Permissions)
https://yzhums.com/10068/

Dynamics 365 Business Central: Permission Exclusion (Exclude in Permission Set)

https://yzhums.com/30562/

Hope this helps.

Thanks.

ZHU

Was this reply helpful? Yes No
Suggested answer

Yi Yong 2,704 Super User 2026 Season 1 on at

Like (2)

Report
Copy link

Link copied!

Hello,

Requirement 1:

You may need to understand how permissions hierarchy work.

You need to create two permissions and you should not use a Permission Set and inherit from multiple permission sets, because you will end up having RIMD to Table 38 instead of by Document Type.

I wrote a simple post about it: https://yiyongonbc.com/2025/02/07/dynamics-365-business-central-understanding-permission-sets-hierarchy/

Requirement 2:

You might need to customize for this but both will run Codeunit::"Gen. Jnl.-Post".

Was this reply helpful? Yes No
Gerardo Rentería Ga... 26,509 Most Valuable Professional on at

Like (2)

Report
Copy link

Link copied!

Hi, good day
I hope this can help you, and give you some hints.

Business Central Permission Sets: The Complete Setup Guide

A Complete Guide to Business Central Permissions Sets

Best Regards
Gerardo

Was this reply helpful? Yes No
Suggested answer

Teagen Boll 2,383 Super User 2026 Season 1 on at

Like (2)

Report
Copy link

Link copied!

For both of these scenarios you will have to use security filters. A lot of of different pages use the same tables.

You can read about security filters here: Using Security Filters - Business Central | Microsoft Learn

What you will need to do is find some identifier in the table to use as a security filter. Document type will work for the Purchase Header table and for the GL Journal table you could use the Template Name field.

Best,

Teagen Boll

Work: Catapult ERP

Social: LinkedIn

Was this reply helpful? Yes No
Suggested answer

OussamaSabbouh 15,595 Super User 2026 Season 1 on at

Like (2)

Report
Copy link

Link copied!

Hello ,

Requirement 1 is usually doable with a custom permission set by allowing Purchase Invoices and excluding Purchase Orders, but Requirement 2 is the key limitation: because Payment Journal, General Journal, and FA G/L Journal all use the same core journal engine and tables like Table 81 Gen. Journal Line, standard permissions cannot cleanly allow a user to post only Payment Journals while letting them only create but not post the other journal types, so the practical best practice is permissions for basic access, then workflow approval or a small customization to block posting by specific journal template/batch for General Journal and FA G/L Journal while still allowing Payment Journal posting.

Regards,
Oussama Sabbouh

Was this reply helpful? Yes No
Suggested answer

Aman Kakkar 3,465 Super User 2026 Season 1 on at

Like (1)

Report
Copy link

Link copied!

Hi,

For Requirement 01 - You can use the Record Permissions feature of Business Central - Dynamics 365 Business Central: How to create or modify permissions by recording your actions (Record Permissions) | Dynamics 365 Lab

For Requirement 02 - You can create a Boolean field in the User Setup, and based on that Boolean you can write code on "OnBeforeAction" trigger by extending the Journal Pages . If User Setup -> Boolean enabled for the user, then allow posting, else through error.

If you find it helpful, do mark it as verified.

Aman K

Was this reply helpful? Yes No