Maybe this will help simplify your process.
Yes, permission management in BC can be tricky. Here are a few tips:
1. Start with Minimal Role + Record Permissions
Assign a basic role (like D365 Read or very limited custom role).
Use Record Permissions only during test sessions to log what's missing, then manually review and clean it up.
2. Use Permission Recorder Carefully
Run the Permission Recorder while performing only the intended tasks.
Then export, review, and edit the set — remove anything unnecessary (e.g., unintended background calls like Codeunit 7233).
3. Avoid Overreliance on Built-In Roles
Built-in roles like D365 BASIC may include access to features your users won’t use.
Create your own roles starting from scratch or duplicating existing ones, then trimming.
If you’re repeatedly creating roles for similar user types, consider creating role templates and reusing them.
Mark below checkbox to make this answer Verified if it helps you. Let me know if you’d like a sample minimal permission set.
