Small and medium business | Business Central, N...

Roles and Permissions

(8) Share

Report

Posted on by SP-17110508-0

Hello everyone,

I need help configuring user roles and permissions in Business Central.

I want to assign very specific access levels for different users

User A

Should have access only to the Purchase and Warehouse modules.

They should not be able to see or open any Sales pages (e.g., Sales Quotes, Sales Orders, or any other sales-related documents).
User B

Should have access only to the Warehouse module.

They must be able to perform all warehouse-related transactions and review entries, but must not have access to any other functional areas

I would like guidance on:

How to properly configure these restrictions using permission sets / security roles, and
What is the best approach for maintaining such strict module-based user access in Business Central.

Any advice, recommended practices, or examples would be greatly appreciated.

Thank you,

Suketu

Categories:

Dynamics 365 Business Central

Microsoft Dynamics NAV

I have the same question (0)

All responses (6)

Answers (0)

Suggested answer

Pallavi Phade

3,721 on at

Like (3)

Report

Namaste @CU16041326-0

Create new permission set for Purchase , Warehouse seperately

Remove Super , D365 Full Access ., D365 Bus. Access , Add basic login access .

Add below permsision setss for Purchase

Considering trnasactions , masters

D365 PURCH DOC, EDIT	Dyn. 365 Create purch. doc.	System	Base Application
D365 PURCH DOC, POST	Dyn. 365 Post purchase doc.	System	Base Application

Permission Set	Name	Type	Extension Name
D365 ITEM AVAIL CALC	Calculate item availability	System	Base Application
D365 ITEM, EDIT	Dynamics 365 Create items	System	Base Application
D365 ITEM, VIEW	Dynamics 365 View items	System	Base Application
D365 VENDOR, EDIT	Dynamics 365 Create vendors	System	Base Application
D365 VENDOR, VIEW	Dynamics 365 View vendors	System	Base Application

Add below permission set for Warehouse

Considering trnasactions , masters

Permission Set	Name	Type	Extension Name
D365 WHSE, EDIT	Dynamics 365 Create warehouse	System	Base Application
D365 WHSE, SETUP	Dynamics 365 Setup warehouse	System	Base Application
D365 WHSE, VIEW	Dynamics 365 View warehouse	System	Base Application

Permission Set	Name	Type	Extension Name
D365 ITEM AVAIL CALC	Calculate item availability	System	Base Application
D365 ITEM, EDIT	Dynamics 365 Create items	System	Base Application
D365 ITEM, VIEW	Dynamics 365 View items	System	Base Application
D365 VENDOR, EDIT	Dynamics 365 Create vendors	System	Base Application
D365 VENDOR, VIEW	Dynamics 365 View vendors	System	Base Application

D365 INV DOC, CREATE	Dyn. 365 Create inventory doc	System	Base Application
D365 INV DOC, POST	Dyn. 365 Post inventory doc	System	Base Application
D365 INV, SETUP	Dyn. 365 Inventory Setup	System	Base Application

Add Profiles to user Purchase

Add profile to user Warehouse

Regards

Pallavi Phade

1 people found this reply helpful.

Was this reply helpful? Yes No

Suggested answer

Jainam M. Kothari 15,627 Super User 2025 Season 2 on at

Like (3)

Report

Hello,

To configure strict module-based access in Business Central, create custom permission sets tailored to each user’s role: start with standard sets like D365 PURCH DOC, EDIT or D365 WMS FULL ACCESS, then remove any unwanted permissions (e.g., Sales tables/pages for User A and all non-Warehouse permissions for User B).

Use the Permission Recorder to capture required actions, avoid overlapping sets, and assign these custom sets via the User Card.

Regularly review permissions after updates to maintain compliance and ensure users only access their designated functional areas.

1 people found this reply helpful.

Was this reply helpful? Yes No
Suggested answer

OussamaSabbouh 5,073 on at

Like (2)

Report

Hello,

To restrict users by module in Business Central:

Give each user minimal base permissions (e.g., D365 READ).

Add only the functional sets they need (Purchasing or Warehouse).

Create a Deny-type permission set for modules they must not access (e.g., deny all Sales tables/pages).

Assign both the needed permissions + the deny set to each user.

This is the cleanest and safest way to control access by module.

Regards,

Oussama Sabbouh

1 people found this reply helpful.

Was this reply helpful? Yes No
Suggested answer

YUN ZHU 95,309 Super User 2025 Season 2 on at

Like (2)

Report

Hi, My personal suggestion is to use Permission Exclusion, as it's simpler.

Dynamics 365 Business Central: Permission Exclusion (Exclude in Permission Set)

https://yzhums.com/30562/

Thanks.

ZHU

Was this reply helpful? Yes No
Gerardo Rentería Ga... 25,078 Most Valuable Professional on at

Like (2)

Report

Hi, good day
I hope this can help you, and give you some hints.

Understanding Hierarchical Permission Sets in Business Central - Sharing The Righter Way - Cynthiapriebe.com

Demystifying User Access: Mastering Permissions in Business Central

Best Regards
Gerardo

Was this reply helpful? Yes No
Suggested answer

Rishabh Kanaskar 6,147 on at

Like (2)

Report

Hi,

Create custom permission sets for each user:

User A

Start with base sets: D365 PURCH DOC, D365 WAREHOUSE.
Remove any sets that include Sales (e.g., D365 SALES DOC).
Verify by checking permissions in Permission Sets and removing access to Sales tables/pages.

User B

Assign D365 WAREHOUSE only.
Ensure no other functional sets are assigned.

Best approach:

Use custom permission sets instead of modifying standard ones.
Test with Effective Permissions to confirm restrictions.
Maintain strict module-based access by grouping permissions by functional area and avoiding overlapping sets.
For long-term control, manage via Security Groups and assign permission sets to groups.

Thanks

Rishabh

Was this reply helpful? Yes No