Small and medium business | Business Central, N...

Assigning permissions to users with New-NAVServerUserPermissionSet

(0) Share

Report

Posted on by Fernando Jose R

I want to automate the process of assigning permissions in Business Centran Onprem but when I want to assign a permission for example LOGIN get the following error.

New-NAVServerUserPermissionSet : The Aggregate Permission Set does not exist. Identification fields and values: Scope='Tenant',App
ID='{63CA2FA4-4F03-4F2B-A480-172FEF340D3F}',Role ID='LOGIN'

The command I use is as follows.

New-NAVServerUserPermissionSet -ServerInstance BC200 -UserName Desarrollo -AppName "System Application" -PermissionSetId LOGIN -Scope System

All responses (4)

Answers (0)

Suggested answer

Marco Mels on at

Like (0)

Report

RE: Assigning permissions to users with New-NAVServerUserPermissionSet

Hello,

Best probably is to make a copy of the system permission set and then run the following command:

New-NAVServerUserPermissionSet -ServerInstance <<serverinstance>> -Tenant <<tenantname>> -PermissionSetId <<COPY OF PS>> -Scope Tenant -UserName <<username>>

You then also have the opportunity to enable "Notify on Change Permission Set" which is helpful if you want to be notified when the original System permission set is changed. Note: This option is only enabled if the related notification is enabled.

Hope this is an OK workaround for you. If not, please raise it to Microsoft via your partner or CSP so support engineer can ask Product Group what the expected behavior should be. I agree that New-NavUserPermission set is not useful if you can only add one or two permission sets to the user.

Thank you.
Fernando Jose R 34 on at

Like (0)

Report

RE: Assigning permissions to users with New-NAVServerUserPermissionSet

I already found the configuration file, it's true if I change the property you say to false, only the SUPER permission appears, so how can I fix the problem? Why can I assign SUPER, SECURITY and my extensions permissions, but I can't with all others like BASIC and LOGIN?
Fernando Jose R 34 on at

Like (0)

Report

RE: Assigning permissions to users with New-NAVServerUserPermissionSet

no, it is not multitenant that I know of, but something strange happens is that if I assign a set of permissions from my own extension if it works, the scope of my extension appears as tenant.

where is the customsettings.config file located?
Suggested answer

Marco Mels on at

Like (0)

Report

RE: Assigning permissions to users with New-NAVServerUserPermissionSet

Hello,

If you set UsePermissionSetsFromExtensions to false in the customsettings.config file and run Get-Get-NavServerPermissionSet after restarting NST for the changes to take effect, you will see that the only System Permission is SUPER.

Are you operating from a multi tenant system?

Thanks.