Small and medium business | Business Central, N...

SUPER permission access

(8) Share

Report

Posted on by YL-10061748-0

Hi All,

I'd like to confirm a statement. "The super role can change any configuration in the Business Central application and e.g. force a JE through on a closed account, change the status on a transaction or any threshold."

A lot of automated controls are standard functionality, but a user with SUPER access can just bypass anything. Is this true?

Categories:

Dynamics 365 Business Central

I have the same question (0)

All responses (8)

Answers (0)

Sort by

Suggested answer

YUN ZHU 101,995 Super User 2026 Season 1 on at

Like (7)

Report
Copy link

Link copied!

No... For example, Super users cannot modify the data after the transaction has been posted.

The following is the official explanation.

https://learn.microsoft.com/en-us/dynamics365/business-central/dev-itpro/administration/administration-special-permission-sets?wt.mc_id=DX-MVP-5004336

Thanks

ZHU

Was this reply helpful? Yes No
Suggested answer

OussamaSabbouh 17,676 Super User 2026 Season 1 on at

Like (6)

Report
Copy link

Link copied!

Hello,
partly true, but I would not phrase it as “SUPER can bypass anything”; SUPER can read/use/update/delete all data and application objects within the user’s license, so yes, it is very powerful and can change many setups, thresholds, workflows, permissions, master data, etc., and that is why it should be tightly controlled. But SUPER does not magically override every business rule or platform restriction: posting date controls, closed inventory/accounting periods, license entitlements, approval logic, validations in posting codeunits, and audit/security controls can still apply depending on the action. The real audit point is: if a user has SUPER, they may be able to change the setup first and then perform the transaction, which is why SUPER should be limited to admins, monitored, and preferably separated from normal transaction processing users.
Regards,
Oussama Sabbouh

Was this reply helpful? Yes No
Suggested answer

Pallavi Phade 5,742 Super User 2026 Season 1 on at

Like (4)

Report
Copy link

Link copied!

Namaste @Ying Liu

Super Permission cannot modify audit data in posted documents ( unless you update dimension or non financial information other user can also do)

Super permission user cannot modify base validations like ( example Cannot change Base UOM in item card if item ledger is posted for that item)

https://learn.microsoft.com/en-us/dynamics365/business-central/application/system-application/permissionset/system.security.accesscontrol.super

https://learn.microsoft.com/en-us/dynamics365/business-central/dev-itpro/administration/administration-special-permission-sets

Warm Regards

Pallavi Phade

www.linkedin.com/in/pallaviphade131116

Was this reply helpful? Yes No
Suggested answer

Teagen Boll 3,214 Super User 2026 Season 1 on at

Like (5)

Report
Copy link

Link copied!

No, that's not true. Super users in BC just simply have Read, Edit, Delete and Create permissions on every single standard TableData object (and other objects) in Business Central. This just simply means they can change data anywhere in the system but they are still stricted by validation rules and restrictions around posted documents and journals. Business Central is still an accounting system first and foremost so it is very strict about what can be changed and cant be changed even if a user is given all the permissions in the system. All journal entries and posted documents are required to be auditable.

Best,

Teagen Boll, CPA

Work: Catapult ERP

Social: LinkedIn

Was this reply helpful? Yes No
Suggested answer

Grigorios Mavrogeorgis 2,544 Super User 2026 Season 1 on at

Like (4)

Report
Copy link

Link copied!

Hi,
Yes, basically true, but I would not say it that strong like "bypass anything".

SUPER has full permission on all objects, so that user can change setup, posting setup, thresholds, approvals, and post in periods or accounts that are normally blocked. Most controls in BC are just configuration, not hard locks, so SUPER can turn them off and then post. That part is correct.
But not everything is only permission. A real closed fiscal year you cannot just force, you must reopen the period first, and that itself is an action that is visible. Also if Change Log is enabled, the actions still leave a trail, SUPER does not hide that.

So I would say: SUPER can bypass almost all configurable controls, yes, but it still leaves traces if logging is set up. This is exactly why SUPER should be given to very few people and monitored.

Hope this helps.

✅ Tick the checkbox below to mark the answer as verified, if it helped resolve your question.

Regards

Gregory Mavrogeorgis

Work: GMSOFT Limited
Blog: Inside Business Central
LinkedIn: www.linkedin.com/in/gregorymavrogeorgis

Was this reply helpful? Yes No
Gerardo Rentería Ga... 27,280 Most Valuable Professional on at

Like (4)

Report
Copy link

Link copied!

Hi, good day
I hope this can help you, and give you some hints.

Super vs Full Permission Sets in Microsoft Dynamics 365 Business Central - Kopis, LLC
Best Regards
Gerardo

Was this reply helpful? Yes No
Suggested answer

Jainam M. Kothari 17,024 Super User 2026 Season 1 on at

Like (3)

Report
Copy link

Link copied!

Hello,

The statement is broadly true but should be nuanced: in Business Central, a user with the SUPER permission set effectively has unrestricted access to all application objects and data, meaning they can modify configurations, override controls, and potentially bypass many standard validations (such as posting restrictions or transaction status controls) if those controls are not explicitly enforced through hardened logic (e.g., code, approvals, or system-enforced checks).

However, it is not that SUPER automatically “disables” all controls—rather, it grants the ability to change setups or data in ways that can circumvent those controls, especially if safeguards rely only on configuration.

Proper governance therefore requires limiting SUPER usage and implementing stronger controls like approvals, audit trails, and extensions that cannot be overridden purely by permissions.

Was this reply helpful? Yes No
YL-10061748-0 18 on at

Like (1)

Report
Copy link

Link copied!

Thank you all for who has replied! Truely appreciate you taking time to share your knowledge.

Was this reply helpful? Yes No