Navigating Security, Permissions, and User Groups in Dynamics 365 Business Central

by | August 2, 2018 | Dynamics 365 Business Central

As a Business Central Administrator, one of your roles is to manage permissions for users & groups of users within your organization. You may be a Finance or Operations manager, an IT manager, an Office Manager, or the Business Central Administrator for your organization.  This blog was written with you in mind!  Whether you are going through a Business Central implementation, or have already implemented Business Central and are looking to align security & permissions to the roles & responsibilities of users within your organization, we have geared this content for you.

User Groups

User Groups in Dynamics 365 Business Central are an easy way to group together permissions that will be common among multiple users.

Let’s say you have a customer service group that you would like to grant access to Business Central, but you want to limit their access to Customers and Sales Orders only. You can create a new User Group and assign the appropriate permission sets to that group.

Navigating D365BC

When you’re creating the group, you can also assign the group a “Default Profile” – or role center the user will see when they log in.

Navigating D365BC

Once the User Group is created, you can assign permission sets to that User Group

Navigating D365 BC

Navigating D365 BC

You can quickly view the permission sets associated with each User Group in the “Permission Sets” Fact Box on the right side of the User Group Window.

Navigating D365BC


If you’d like to know more about what is defined in each permission set assigned to your User Groups, you can view this data by viewing the “Permission Set by User Group” matrix.

In this view, the permission sets are listed in the left-hand rows, while the User Groups are listed as columns at the top. If I select a row for the permission set I’m curious about, I can see in each column whether the User Group in question includes that permission set.

Navigating D365 BC

With the permission set highlighted, you can see the permissions to Table Data and other objects in the right-hand Fact Box for Permissions.

Navigating D365 BC

Alternatively, if you drill down into “Permissions” link in the top left corner, you can see a full matrix of the associated permissions, including whether the permission is read/ write/ modify/delete, and direct/indirect.

Navigating D365 BC


Assigning Permissions to Users

Users can be assigned permission either through User Groups, through direct permission set assignment, or both.

In the User Card, there are tabs for both User Groups and User Permission Sets. You can see the full list of User Groups assigned to that user.

The User Permission Sets tab of the user card will automatically inherit the permission sets associated with the User Groups assigned.

As an example, in my Cronus environment, user MATTS has recently been assigned the new “BC NEW CS” User Group we created earlier. When this User Group was assigned, each permission set that was added to the User Group is automatically added to the User.

Navigating D365 BC

Let’s say that in addition to the permissions in the Customer Service Group, I also want Matt to be able to view items. If this is a permission that I want to give Matt, but I don’t want to give to the entire Customer Service Group, I can add that permission on top of the permissions from his User Group.

In this way, I can “build on” to the User Groups by adding an individual permission for this user.

Navigating D365 BC

Assigning Permissions by Company

Another feature of the User Card is that you can assign User Groups and Permission Sets to Users by company. This will only apply if you have multiple companies in Business Central, but if you do (and you have different users in each company) this feature is very helpful.

When assigning the User Group or the User Permission Set, there is a field for “Company.” If the User needs to work in only one company, you can define the company at the time the groups or permissions are assigned. If the user needs permission in more than one company, you can leave the field blank to assign to “all” companies.

Taking our previous example, let’s say that I want to assign the Customer Service User Group to Matt for all companies, but I only want him to be able to view items in CRONUS. Here is what that set up would look like:

Navigating D365 BC

If you are interested in learning more about navigating security, permissions, and user groups in Dynamics 365 Business Central, here are additional resources:


For upcoming releases in Dynamics 365 Business Central Security, see the Business Application release notes:


Related Posts


Submit a Comment

Your email address will not be published. Required fields are marked *

Upcoming Events


05may2:00 pm2:30 pmSimplifying Item Pricing, Availability, and Tracing for Batch Manufacturers

06may11:00 am12:00 pmConfab with Stoneridge - New Features to Empower Your Remote Workforce

12may10:00 am10:30 amThe Modern Manufacturer: Manufacturing Software in the Real World

12may12:00 pm12:30 pmFinancial Implications of Moving from Dynamics GP to Dynamics 365: Licensing and Infrastructure

17may(may 17)8:00 am28(may 28)11:00 amDynamics 365 Finance & Supply Chain Development Training - Online Workshop

19mayAll Day20Manufacturing and Microsoft Technology Conference

19may9:00 am10:00 amWhat is Your Global Manufacturing Strategy? Is It Time to Reshore?

19may10:30 am11:30 amFour Keys to Choosing the Best ERP or CRM Solution

19may10:30 am11:30 amGetting and Keeping Customers in 2021 and Beyond

19may10:30 am11:30 amMastering the Production Floor

19may12:00 pm1:00 pmImagining the Possibilities with Dynamics 365 for Manufacturing

19may12:00 pm1:00 pmBeyond Reporting - What BI Can Do For Your Manufacturing Operation

19may1:30 pm2:30 pmSmart Field Service for Manufacturers and Distributors

19may1:30 pm2:30 pmV is for Victory - The Elements of a Successful MRP Implementation Rollout

19may3:00 pm4:00 pmLot Management Strategies and Best Practices

19may3:00 pm4:00 pmSelling Through a Complex Channel - Distributor Management

20may10:00 am11:00 amManufacturing Technology in 2021 - The Impact of Digital Transformation

20may12:00 pm1:00 pmThe Power of a Connected Shipping Solution

20may12:00 pm1:00 pmEmployee Experience with Company ERP Implementations and Recommendations to Increase Employee Satisfaction

20may1:30 pm2:30 pmReporting and Business Intelligence Strategies for Today's CFO

20may1:30 pm2:30 pmSelecting and Implementing ERP: Don’t Leave it to Chance

20may3:00 pm4:00 pmCybersecurity Tips for Manufacturers – How to Protect Yourself From Ransomware & Other Vulnerabilities

20may3:00 pm4:00 pmEnsuring Quality for Batch Manufacturers

20may3:00 pm4:00 pmGuaranteeing ERP Project Success with an Enterprise Process Review

26may10:00 am10:30 amFinancial Implications of Moving from Dynamics GP to Dynamics 365: Services

26may10:00 am10:30 amThe Modern Manufacturer - Enterprise Asset Management


01jun8:00 am02(jun 2)11:00 amPower BI for Dynamics 365 - Online Workshop

02jun2:00 pm2:30 pmBusiness Intelligence for Batch Manufacturers

09jun10:00 am10:30 amThe Modern Manufacturer - Machine Maintenance Work Orders

23jun10:00 am10:30 amThe Modern Manufacturer: Cost Accounting in D365

About Stoneridge
Stoneridge Software is a unique Microsoft Gold Partner, with emphasis on partner. With specialties in Microsoft Dynamics 365, Microsoft Dynamics AX, Microsoft Dynamics NAV, Microsoft Dynamics GP and Microsoft Dynamics CRM, we focus on attracting the most knowledgeable experts in the field to our team, and prioritize delivering stellar solutions with maximum impact for your business. At Stoneridge, we are deeply committed to your results. Each engagement is met with a dedicated team, ready to provide thorough, tailored, and expert service. Based in Minnesota, we intentionally “step into your shoes,” wherever you are. We focus on what you care about, and develop trusting, long-term relationships with our clients.

Subscribe To Our Blog

Sign up to get periodic updates on the latest posts.

Thank you for subscribing!