A magical new AL-based permission system in Business Central

[@mossimac]

The videos you are providing are extremely helpful. Please don’t stop!

[@TeChWarZ]

Thanks for the content! Big fan from Portugal!

[@saschafischer2905]

Thanks a lot Erik for your content, it´s very helpful. Also the additional information about converting permission sets from sql. Kind regards from germany ;-)

[@KalyanJadhav-up4fv]

@erik Hougaard - How to Set permissions, module wise in business central

[@ara3n]

For indirect permission, the object needs to have permission added for the table for indirect permission to work?

[@Hougaard]

Yes, but also indirect.

[@KalyanJadhav-up4fv]

How to set user permission, module wise in business central

[@VikasSingh-uc3yv]

Hi Eric, this video has been super helpful. Thank you so much for putting up the content like this. One of the things I'm trying to find a solution for is how to define permission on one of the objects in a table e.g. in the purchase order, a user should be able to edit 'Qty to Receive' but shouldn't be able to edit 'Qty to Invoice'. Is it possible to do that with AL?

[@Hougaard]

That cannot be solved with permissions alone. Either you need to create a customization to that or use an app like appsource.microsoft.com/en-us/product/dynamics-365-business-central/PUBID.efoqus-5058796%7CAID.security%7CPAPPID.7c4b9095-058f-4464-a4d0-104cc305e68c

[@VikasSingh-uc3yv]

Thanks, Eirk! By customization, do you mean customizing the user profile pages (hiding the fields)?

[@pzegels]

Hi Erik, testing this on BC 18.2 SAAS, all goes well, compiler does work and publishes the app, but when looking in BC permission set page nothing is visable ! Any thoughts on that ?

[@innsbruckchris3572]

Hi Erik, do you know if there is a way to exclude a table from a system permission set without copying it? E.g. if i would like to work with the system permission sets (as they also get updated by MS with every release with the new objects) but would like to exclude the g/l entry table (which is part of so many system permission sets and gets added to even more...). I hoped with new functionalities regarding permissions it would be possible to do something like IncludedPermissionSets = "D365 ACC. PAYABLE" but overwrite then the permissions granted in this with e.g. only ready or with a security filter. But was not able to achive this

[@Hougaard]

Somethings coming from Microsoft with v20 that perhaps fits the bill for what you're asking...

[@XdimidrolX]

Hi Erik, thanks for the video! How about kipping both permissionSets in one solution? looks like AL compliler allows to keep xml and al permission sets at the same time…

[@Hougaard]

Both of them will create a named permission set, you can keep both, but the XML format goes away at some point.

[@YannSaintLaurent]

Say Stafe!