Dynamics F/SCM Customer Experience (CRM) Dynamics GP Dynamics Business Central (NAV) Dynamics SL Power Platform Fabric Copilot

[Sebastian Lindmark]

Hi

We have a challenge when doing the permission set for a rapid start user. We don’t get access to these buttons to show. 
(I have recorded the entire flow from creation of package to application of data)

Any suggestions for any security we have missed?

——————————
Sebastian Lindmark
Application Manager
Envirotainer
——————————

[Cynthia Priebe]

In Business Central there is a permission set Excel Export Action that contains System Object ID 6110 Allow Action Export to Excel. You may not have this permission set or object in your version, but this is where I would start. 

——————————
Cynthia Priebe
New View Strategies
“The NAV & BC training and process experts”
——————————
——————————————-

[Jason Wilder]

This is page 8615 “Config. Packages”.  Those 2 actions do not have any code or properties set that would have them be disabled in my version of NAV2018. 

I peeked ahead at BC14 and there is a table permission needed to activate those buttons.  The user needs Write Permission for table 8623 “Config Package”  for those buttons to be active.  Write Permission would be Insert, Modify or Delete permission including security filters if you use those (most people don’t).  Add a Permission Set with that permission and you should be good to go.

——————————
Jason Wilder
Senior Application Developer
Stonewall Kitchen
York ME
——————————
——————————————-

[Lewis Rosenberg]

Business Central has a permission set called “D365 RapidStart” that gives full permissions for table 8623.

——————————
Lewis Rosenberg
IT Manager
Mars Fishcare
Chalfont PA
http://www.apifishcare.com
————————————————————————
D365UG-BC/NAVUG All-Star
D365UG-BC/NAVUG Board of Advisors, Chairperson Emeritus
D365UG-BC/NAVUG Programming Committee

Twitter: @RosenbergL
LinkedIn: https://www.linkedin.com/in/rosenbergl
————————————————————————
——————————
——————————————-

[Sebastian Lindmark]

Thanks Cynthia, Jason and Lewis

It was a  combination of giving full access to Table 8623 as well ass adding execute on the system objects. 

I see myself as quite proficient in permission setup but we went from NAV 2015 to BC14 (Which I should have stated) and there are some new things to learn 🙂 

BR
Sebastian

——————————
Sebastian Lindmark
Application Manager
Envirotainer
——————————
——————————————-

[Jeanmarie Curley]

Hi- I was wondering if it is possible to narrow the Rapid Start permission so that users can only pull data out to look at but not bring it back in. This seems to be a safe way to allow people access to the tables. Is this possible and more importantly, is this a bad (dangerous!) idea to allow more users to see the table data they need when it cannot be accessed from NAV reports easily? We do not have alot of IT support so writing custom reports is not an option for us. 
Thanks for the advice!

Jeanmarie

——————————
Jeanmarie Curley
Sr Director Bus Ops
Quality Biological Inc
Gaithersburg MD 20878
——————————
——————————————-

[Lewis Rosenberg]

Hello Jeanmarie,

You could create a permission set that does not allow INSERT access to TableData 8623.  That would prevent importing into the Configuration Package.
RapidStart will also not allow anyone to update tables if they don’t have INSERT or MODIFY permissions for that table.

——————————
Lewis Rosenberg
IT Manager
Mars Fishcare
Chalfont PA
http://www.apifishcare.com
————————————————————————
D365UG-BC/NAVUG All-Star
D365UG-BC/NAVUG Board of Advisors, Chairperson Emeritus
D365UG-BC/NAVUG Programming Committee

Twitter: @RosenbergL
LinkedIn: https://www.linkedin.com/in/rosenbergl
————————————————————————
——————————
——————————————-

[Jeanmarie Curley]

Hi Lewis- Thank you for the suggestion to remove the insert, modify and delete permissions from Table 8623. I have attached our out of the box permissions for Rapid Start. Could you possibly take a minute and review and let me know your thoughts on what else may need to be removed? Also, I find it curious that the first three accounting tables are included. Is your system this way? 
Thank you so much for your help. I appreciate how frequently you respond to the group. I am learning so much. 
Regards, 

Jeanmarie 

——————————
Jeanmarie Curley
Sr Director Bus Ops
Quality Biological Inc
Gaithersburg MD 20878
——————————
——————————————-

[Lewis Rosenberg]

Hello ?,

Cynthia’s suggestion to use the permissions recorded is a GREAT suggestion.  If you are not sure how it works, you can fast forward to the 29:40 mark in this video or search for my “All About BC/NAV Security” session from this years’ Summit Conference at mydacfeed.com, if you attended.

If, however you want to make a copy of your RAPIDSTART permission set and modify the copy, that should work too.  I reviewed what you sent and your permission set matches the “RapidStart” permission set from Cronus (the standard Microsoft test database) except for one object.  The Cronus database also includes a “D365 RapidStart” permission set which differs slightly – I’m not sure why.  I also don’t know why the accounting table objects are included.   I have attached a comparison of your permission set with the two in Cronus.

——————————
Lewis Rosenberg
IT Manager
Mars Fishcare
Chalfont PA
http://www.apifishcare.com
————————————————————————
D365UG-BC/NAVUG All-Star
D365UG-BC/NAVUG Board of Advisors, Chairperson Emeritus
D365UG-BC/NAVUG Programming Committee

Twitter: @RosenbergL
LinkedIn: https://www.linkedin.com/in/rosenbergl
————————————————————————
——————————
——————————————-

[Cynthia Priebe]

If you are in Business Central, don’t forget about the permission recorder. This is a great tool for creating permission sets based on very specific actions taken in Business Central. Using it to record permissions needed for activities in a very targeted functional area such as you are describing is a where this tool shines.

——————————
Cynthia Priebe
New View Strategies
“The NAV & BC training and process experts”
——————————
——————————————-