web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Small and medium business | Business Central, N... / Assigning permissions ...
Small and medium business | Business Central, N...
Suggested Answer

Assigning permissions to users with New-NAVServerUserPermissionSet

(0) ShareShare
ReportReport
Posted on by Fernando Jose R

I want to automate the process of assigning permissions in Business Centran Onprem but when I want to assign a permission for example LOGIN get the following error.

New-NAVServerUserPermissionSet : The Aggregate Permission Set does not exist. Identification fields and values: Scope='Tenant',App
ID='{63CA2FA4-4F03-4F2B-A480-172FEF340D3F}',Role ID='LOGIN'

The command I use is as follows.

New-NAVServerUserPermissionSet -ServerInstance BC200 -UserName Desarrollo -AppName "System Application" -PermissionSetId LOGIN -Scope System

I have the same question (0)
  • Suggested answer
    Marco Mels Profile Picture
    Marco Mels on at

    Hello,

    If you set UsePermissionSetsFromExtensions to false in the customsettings.config file and run Get-Get-NavServerPermissionSet  after restarting NST for the changes to take effect, you will see that the only System Permission is SUPER.

    Are you operating from a multi tenant system?

    Thanks.

  • Fernando Jose R Profile Picture
    Fernando Jose R on at

    no, it is not multitenant that I know of, but something strange happens is that if I assign a set of permissions from my own extension if it works, the scope of my extension appears as tenant.

    where is the customsettings.config file located?

  • Fernando Jose R Profile Picture
    Fernando Jose R on at

    I already found the configuration file, it's true if I change the property you say to false, only the SUPER permission appears, so how can I fix the problem? Why can I assign SUPER, SECURITY and my extensions permissions, but I can't with all others like BASIC and LOGIN?

  • Suggested answer
    Marco Mels Profile Picture
    Marco Mels on at

    Hello,

    Best probably is to make a copy of the system permission set and then run the following command:

    New-NAVServerUserPermissionSet -ServerInstance <<serverinstance>> -Tenant <<tenantname>> -PermissionSetId  <<COPY OF PS>> -Scope Tenant -UserName <<username>>

    You then also have the opportunity to enable "Notify on Change Permission Set" which is helpful if you want to be notified when the original System permission set is changed. Note: This option is only enabled if the related notification is enabled.

    Hope this is an OK workaround for you. If not, please raise it to Microsoft via your partner or CSP so support engineer can ask Product Group what the expected behavior should be. I agree that New-NavUserPermission set is not useful if you can only add one or two permission sets to the user.

    Thank you.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Congratulations to the November Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > Small and medium business | Business Central, NAV, RMS

#1
OussamaSabbouh Profile Picture

OussamaSabbouh 2,135

#2
YUN ZHU Profile Picture

YUN ZHU 733 Super User 2025 Season 2

#3
Sumit Singh Profile Picture

Sumit Singh 612

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans