A Business Central user who has access to only the "D365 READ" Permission Set wants to install an application to allow syncing of data between Business Central and that application.
Also, he wants to edit columns in Business Central allowing him to include different customer information for exporting purposes.
To accomplish all of this, would he need Permission Sets providing access to OAuth, APIs, and Web Services?
If so, what are those Permission Sets?
Would he really need the "D365 BUS FULL ACCESS" Permission Set?
split the two, they need different rights. Installing the app and wiring up the OAuth / web service connection is really an admin job — a pure D365 READ user won't do it. That setup also usually touches a Microsoft Entra app registration outside BC, so it's not only a BC permission set that's missing.
Editing columns for export is mostly just personalization, that doesn't need extra data rights. Open in Excel and column changes work fine on read — unless he wants to write data back into BC, then read alone isn't enough. He doesn't need D365 BUS FULL ACCESS for this, that's way too broad. I'd give targeted sets instead. There are permission sets around API and extension management, but I won't quote the exact names from memory, they shift a bit between versions — open the Permission Sets page, filter on API and extension, and confirm in your version.
Does the sync only read out of BC, or also write back? That changes the answer.
Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.
4,001
Share
Report
All responses (
Answers (
