hi
It is possible to create a user group with limited permissions for sales and purchasing in Microsoft Dynamics 365 Business Central. One approach is to create a custom security role that only grants the necessary permissions for sales and purchasing and excludes access to financial data.
To create a custom security role, you can use the "Permission Sets" and "Roles" pages in Business Central. Start by creating a new permission set for sales and purchasing that includes only the necessary permissions. Then, create a new role that is based on the "Basic User" role, but with the custom permission set assigned instead of the default permission set. Finally, assign the new role to the users who need access to sales and purchasing but not financial data.
You can also consider using the "Permission Sets" page to customize the permissions of the default sales and purchasing permission sets. To do this, you can remove the permissions related to financial data and save the modified permission set with a new name. Then, create a new role based on the "Basic User" role and assign the modified permission set to the role. This approach may be faster than creating a custom permission set from scratch, but it may be less flexible in the long term.
Overall, the "try and error" approach suggested by your consultant may be necessary to fine-tune the permissions of the custom role or permission set. It's important to thoroughly test the permissions to ensure that users have the necessary access to perform their job duties without accessing sensitive financial data.
DAniele