Tips and Tricks:?How To Troubleshoot Permission Issues in Business Central

Welcome to the Western Computer LinkedIn newsletter. This bimonthly series provides tips and tricks for helping you and your internal teams work more efficiently in Microsoft Dynamics 365 Business Central. With more than 37 years in business, Western Computer has deployed 1,250+ solutions, including more than 350 in the cloud. In this LinkedIn newsletter series, we share the expertise we have accumulated to empower Dynamics 365 Business Central users and enable them to work as proficiently as possible.?

As a system administrator in Business Central, managing user permissions is essential for ensuring security and efficiency. Instead of giving everyone SUPER user access, you assign specific permission sets to each user. But what happens when users encounter errors due to missing permissions or gain access to areas they shouldn’t???

Here’s a practical guide from Marcelo Borges on how to troubleshoot both missing and excessive permissions in Business Central. Read the full blog on Western Computer’s website for all the details and insights from Marcelo.?

Troubleshooting Missing Permissions?

When users lack the necessary permissions, they may receive an error message when trying to access certain parts of the system. For instance, if a user tries to access the Production BOMs list without proper permissions, they’ll see an error like this:?

?? Key parts of the error message to note:?

• In Red, it reads “TableData”. This is the Object Type that our user is lacking permission on. Object Types can be TableData, Table, Page, Report, Codeunit or System. (there are a few other types as well, but they are less common).?

• In Green, it reads the Object Id and Name: 99000771 – Production BOM Header.?

• In Orange, it reads “Read”, which is the permission access that the user is lacking. Permission Accesses are Read, Insert, Modify, Delete or Execute.?

If we reorganize this message putting the Orange token first, this is how we would read it:?

Lacking permission to Read on TableData 99000771 Production BOM Header.?

To resolve this, identify the missing permission, then locate a Permission Set that covers it. For standard Business Central objects, base Permission Sets typically include the necessary permissions. However, for custom modifications, you may need to check if the deployed extension has its own permission set. If you don’t find any Permission Sets that include the object that is missing, ultimately, you will need to create a User-Defined Permission Set. See below an example of a custom Permission Set where I included only the Production BOM Header table, with a Read permission only.?

Avoid adding unnecessary permissions to custom sets, as this could lead to excessive permissions. When fixing permissions, users may encounter new errors related to different objects. To avoid confusion, remind them to check each error message carefully, as it might highlight a new missing permission. If troubleshooting remotely, request updated screenshots for every error message.?

Troubleshooting Excess Permissions?

Excess permissions occur when users have access to areas they shouldn’t. To identify these permissions, use the Effective Permissions page in Business Central. This page displays all permissions assigned to a user and their sources. While users can only view their own permissions, SUPER users have visibility into permissions across the system.?

Example: If Debra isn’t supposed to access the Production BOM List, yet you saw her using it, you can investigate her Effective Permissions and search for the Production BOM Header permission. This will reveal which permission set grants her access.?

From the screenshot above, we can see that the permission set that is granting her access to the Production BOM Header, is the BOM-LIST one.?

Learn More?

Effectively managing permissions in Business Central is crucial for maintaining system security and efficiency. By creating targeted custom permission sets, you can prevent issues related to both missing and excessive permissions. Clear communication and attention to detail are key during troubleshooting, and tools like the Effective Permissions page empower administrators to identify and resolve issues swiftly. Following these best practices ensures users have appropriate access, safeguarding your organization’s sensitive data.?

About Western Computer??

Western Computer is a Microsoft partner that many companies across North America trust to design, deploy, and support Microsoft solutions. We offer deep expertise across the Microsoft technology stack, particularly in Dynamics 365 Business Central. Our thought leaders can help you ensure your critical ERP application meets your business needs for today and beyond. This includes building a roadmap that enables your organization to take advantage of technology that helps you grow and compete in your industry. We provide dedicated teams of senior-level experts to deliver and align project teams with the culture of our customers to meet your requirements for technical and industry expertise.??