Announcements
I want to automate the process of assigning permissions in Business Centran Onprem but when I want to assign a permission for example LOGIN get the following error.
New-NAVServerUserPermissionSet : The Aggregate Permission Set does not exist. Identification fields and values: Scope='Tenant',App
ID='{63CA2FA4-4F03-4F2B-A480-172FEF340D3F}',Role ID='LOGIN'
The command I use is as follows.
New-NAVServerUserPermissionSet -ServerInstance BC200 -UserName Desarrollo -AppName "System Application" -PermissionSetId LOGIN -Scope System
Hello,
Best probably is to make a copy of the system permission set and then run the following command:
New-NAVServerUserPermissionSet -ServerInstance <<serverinstance>> -Tenant <<tenantname>> -PermissionSetId <<COPY OF PS>> -Scope Tenant -UserName <<username>>
You then also have the opportunity to enable "Notify on Change Permission Set" which is helpful if you want to be notified when the original System permission set is changed. Note: This option is only enabled if the related notification is enabled.
Hope this is an OK workaround for you. If not, please raise it to Microsoft via your partner or CSP so support engineer can ask Product Group what the expected behavior should be. I agree that New-NavUserPermission set is not useful if you can only add one or two permission sets to the user.
Thank you.
I already found the configuration file, it's true if I change the property you say to false, only the SUPER permission appears, so how can I fix the problem? Why can I assign SUPER, SECURITY and my extensions permissions, but I can't with all others like BASIC and LOGIN?
no, it is not multitenant that I know of, but something strange happens is that if I assign a set of permissions from my own extension if it works, the scope of my extension appears as tenant.
where is the customsettings.config file located?
Hello,
If you set UsePermissionSetsFromExtensions to false in the customsettings.config file and run Get-Get-NavServerPermissionSet after restarting NST for the changes to take effect, you will see that the only System Permission is SUPER.
Are you operating from a multi tenant system?
Thanks.
André Arnaud de Cal... 291,359 Super User 2024 Season 2
Martin Dráb 230,370 Most Valuable Professional
nmaenpaa 101,156