Hi, Readers.
Today I would like to briefly talk about a qustion I saw in the Dynamics 365 Community before, why can’t a Super User create a new Company in Business Central. More details: I can’t create a new Company. This is a question I see popping up in the forums from time to time.
First of all, to create a new company in Business Central, you must be assigned to the Super permission set. More details: Create new companies in Business Central
However, you might encounter the following scenario—for example, where a user has the SUPER permission set assigned as shown below:
However, this user is unable to create a new company.
Only users with the SUPER permission set can create a new company.
Why? The reason is simple: a specific Company is designated in the SUPER permission set. However, the standard tooltip isn’t very user-friendly (or helpful).
Company
Specifies the name of the company that this role is limited to for this Windows login.
This is a standard control feature used to “Control access to specific companies“.
When you have multiple companies in Business Central, managing permissions across companies requires extra consideration. You might not want users to have identical access rights to all companies. Instead, you might need to grant users’ permissions based on their company affiliations. When you assign permission sets to individual users or security groups, you can select a specific company to which the permission set applies.
The company isn’t explicitly specified within the permission set, but rather when the permission set is assigned to the user or security group. For example,
If you don’t specify the company when assigning a permission set, the permission set then applies to all companies.
If you want a permission set to apply to more than one company, but not all companies, add the permission set specifically for each company separately.
The SUPER permission set is the most critical and vital one among all the special permission sets in Business Central. Users assigned with this permission set can read, use, update, and delete all data and all application objects in the scope of your license. But if you specify a company, its effect is restricted only to that setup company. More details: Dynamics 365 Business Central: Special Permission Sets
In addition, this user cannot clear the designated company from the permission set on their own; they must contact an administrator to resolve the issue.
You have not been granted rights to add, modify, or delete this permission set for this user in this company. To obtain rights, you must be granted either the SUPER or SECURITY permission set.
Therefore, this applies not only to the SUPER permission set—whenever you configure user permissions, please always carefully consider whether or not to specify a Company.
PS:
The permission sets and Company automatically assigned when syncing users from Microsoft 365 are retrieved directly from the License Configuration.
More details: License Configuration page (Set Default User Groups and Default Permission Sets for the license type)
END
Hope this will help.
Thanks for reading.
ZHU
コメント