How to control permission for specific operations in AL and Business Central

[@MrTv2dk]

Always been an advocate of using the User Setup for these kinds of settings. Is clean and centralized - and already couples the userID with eg. salesperson code. Which often also is used as a "parameter" in how certain business flows are controlled.

[@TidusConsult]

Thank you so much for theses videos. They are very helpful.

[@anddav123]

Very interesting idea, personally I’ve only ever when required done this via user setup previously. Good to see a alternative idea, That also prevents cluttering the page with Boolean tick boxes.

[@DmitryKatson]

Love the idea, as you can group permissions sets and then you can add group permissions to bunch of users at a time

[@Hougaard]

Exactly, it's like permission sets were built for handling permissions :)

[@KulwantSingh-oz5xw]

Can you make an session on single instance codeunit and its use in my setting. I.e. need session based variable initiated through mysetting division/branch etc.

[@ant1d0te]

It is just one approach of many to separate if user has ability to perform certain operations. It has disadvantage of not being user-friendly for admin maintaining. Compare to user setup where you identify user in the list and just mark or unmark one checkbox. And here you need to go to users, open user card, then delete or add permission set...

[@Hougaard]

But... you cannot preset it and it's decentralized from other permissions :)

[@ant1d0te]

@@Hougaard preset... are you about InitValue for new records in User Setup? Or Install codeunits? :) Usually "non-admin" users do not have possibility to edit User Setup, so it is ok from security side...

[@ant1d0te]

@@Hougaard do not understand me wrong, I am not against different approaches, besides the one you described has own advantages specified in the comment below. Cheers! :)

[@justinfarmiloe6910]

The only downside I can see to this is that you may not want to give those users who control the customised options through permission sets access to be able to change user permissions. Thoughts?

[@Hougaard]

That's security 101 :)

[@viduraishan8550]

Grate