Permissions

Introduction

When you create new users in Business Central, unless you tell Business Central otherwise, they are granted full access to the first company they log into.

In this post I’ll walk through how you can prevent this by making changes in the “Licence Configuration” page

How do new users get their default permissions?

When adding new users to Business Central, they are automatically assigned permissions based primarily on:

The Security Groups they are in (not covered in this post)
The Licence they have been granted.

Its therefore crucial we modify the permissions they inherit as part of their Licence. We do this via the “Licence Configuration” page.

Licence Configuration

Now lets look at how we can configure the permissions using the “Licence Configuration” page

First I open the “Licence Configuration” page

Here we can see all the different licence types for Business Central.

I’ll configure the permissions for the “Dynamics 365 Business Central Essential” licence. To do this I click on the hyperlink for this licence and it opens the page.

As you can see by default granting a user this licence gives them full permissions to the first company they log into. This is the reason why I see so many administrators having to manually go and reset permissions after creating new users.

We can prevent this now by editing the page and customising the permissions.

To do this click the pencil at the top of the page to make the page editable, and click the slider for “Customise Permissions”.

We can now change the permissions. I’m just going to remove the “D365 BUS FULL ACCESS” permission set. To do this I highlight the line and click “Delete Line”

My Licence Configuration now looks as per below:

Now when I create a new user that’s been assigned this licence they won’t have full access.

You can control the access your partner gets by editing the “Delegated Admin agent – Partner” licence

Conclusion

This post goes through how to control permissions to new users based on the licence configuration.

There are other factors to consider when planning permissions in Business Central, like security groups, which could mean you can remove all permissions from the “Licence Configuration”. Maybe we can touch on this on a future post 😊.

Thanks for reading!

Introduction

By default, users can only see their own sent emails via the Sent Emails page, however there may be a requirement for some users to view all emails that have been sent in Business Central. In this post, I’ll go through how this can be achieved via the “User Email View Policies” page.

Sent Emails

When you open the “Sent Emails” page, you will only see what emails you have sent. For example, if I open the Sent Emails page as my admin user, the page is blank.

Email Policies

If you search “User Email View Policies” you can change the permissions to Sent Emails on a user by user basis.

I therefore change this for my ADMIN user to “View all emails”

Now, when I go back to “Sent Emails” page, I can see all emails that have been sent via Business Central.

Problem solved :). Now my admin user can see all emails sent from Business Central.

Thanks for reading!

Need help with Business Central? Contact me