web
You’re offline. This is a read only version of the page.
close
Skip to main content
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Small and medium business | Business Central, N... / Detailed Explanation o...
Small and medium business | Business Central, N...
Answered

Detailed Explanation of system permission sets

(1) ShareShare
ReportReport
Posted on by Community member
Hi,
 
Is there any documentation that has the detailed explanation of the System Permission Sets that come in Business Central?  For example, D365 READ is simple to understand, but D365 ACC. RECEIVABLE is a little more complex and the explanation just says /Dyn. 365 Accounts receivable/.
 
Regards,
 
Sidhartha Ramachandran
Categories:
Dynamics 365 Business Central
I have the same question (0)
  • Verified answer
    YUN ZHU Profile Picture
    YUN ZHU 91,943 Super User 2025 Season 2 on at
    Detailed Explanation of system permission sets
    Hi, only the most specific ones have Microsoft documentation.
    More details:
    Permission set Definition
    SUPER Can read, use, update, and delete all data and all application objects in the scope of your license. Business Central requires that at least one user is assigned this permission set in each database.

    The first user created is automatically assigned the SUPER Permission Set

    You can't modify permissions for the SUPER permission set.

    Running a synchronization of users from Microsoft 365 using the Update Users from Microsoft 365 guide, requires the SUPER permission set.
    SUPER (DATA) Can read, use, update, and delete all data in the scope of your license. You typically assign this permission set to an accounting manager who needs to work with all data but doesn't need to change Business Central.
    SECURITY Manage the permission sets that are assigned to your account. When assigned this permission set, you can:
    • Create new users and assign them any permission set that is also assigned to your account.
    • Remove a permission set from a user as long as the permission set is also assigned to your account.
    • Modify individual permission granted by a permission set as long as the permission set is also assigned to your account.
    The idea behind this permission set is to prohibit you from granting users more permissions than you have. The permission set is useful for SUPER users or global administrators who want to delegate permission management to team administrators. For example, a sales manager can assign permissions in sales area to sales people, sales assistant, sales coordinator, and so on.
    BASIC Grants Read access to almost all application tables and all system tables.

    The main purpose of this permission set is to enable the service to open and show all pages.

    Note: This permission set is available only for Business Central on-premises.
    D365 BASIC Grants Read access to almost all application tables and all system tables.

    The main purpose of this permission set is to enable the service to open and show all pages.
    FOUNDATION UI A prerequisite for all other permission sets. The FOUNDATION permission set grants access to system tables and application setup tables that are required for most application features to work. Note: This permission set is recommended when using the UI Elements Removal feature to automatically remove UI elements according to user permissions. For more information, see Removing Elements from the User Interface According to Permissions.

    Note: This permission set is available only for Business Central on-premises.
    SYSTEM APP - BASIC Grants access to most features of the system application and is required for login to Business Central.
    SYSTEM APP - ADMIN Grants full permissions to all features of the System Application.
    LOGIN Grants the minimum permissions to application and system objects that needed to sign in to Business Central. Use the permission set to allow users to sign in to Business Central without accidentally granting them permissions beyond those required by their tasks. By granting this permission set, the user will always be able to sign in.

    Note: This permission set does not grant access to a Role Center. It only allows the user to log in to Business Central.
     
    For others, please refer to the method mentioned by NAV_with_Narang and check it in the effective permission.
     
    Hope this helps
    Thanks.
    ZHU
     
  • Suggested answer
    NAV_with_Narang Profile Picture
    NAV_with_Narang 2,250 Moderator on at
    Detailed Explanation of system permission sets
    Hi Sidhartha - You can click on each permission set and press "View Effective Permissions". You will then see all the tables/pages one can access with the permission set
     
    There is no documentation available as such

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

News and Announcements

Join experts in person to explore low code and AI agents at the Power Platform Community Conference sponsored by Microsoft

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Abhilash Warrier – Community Spotlight

We are honored to recognize Abhilash Warrier as our Community Spotlight honoree for…

Congratulations to the August Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > Small and medium business | Business Central, NAV, RMS

#1
Nimsara Jayathilaka. Profile Picture

Nimsara Jayathilaka. 3,846

#2
Rishabh Kanaskar Profile Picture

Rishabh Kanaskar 3,157

#3
Sumit Singh Profile Picture

Sumit Singh 2,903

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans