Edit

Share via

Control access to Business Central using security groups

Security groups make it easier for administrators to manage user permissions. For example, for Business Central online, they're reusable across Dynamics 365 applications, such as SharePoint Online, CRM Online, and Business Central. Administrators add permissions to their Business Central security groups, and when they add users to the group the permissions apply to all members. For example, an administrator can create a Business Central security group that gives salespeople the ability to create and post sales orders. Or, let purchasers do the same for purchase orders.

Note

This article describes how to grant certain permissions to users based on their membership of a security group. Learn how to control whether users can access an environment based on their membership of a security group in Manage Access to Environments.

Create security groups in Microsoft Entra or Windows Active Directory

You can use security groups for the online and on-premises versions of Business Central. Depending on your deployment and authentication method, create groups in one of the following ways:

Create Microsoft Entra groups in Microsoft Entra admin center. Learn more in Create, edit, or delete a security group in the Microsoft 365 admin center.

Add security groups in Business Central

Once you've created your Microsoft Entra or Windows Active Directory groups, link them to security groups in Business Central.

  1. Select Search (Alt+Q) in the upper-right corner, enter Security Groups, and then select the related link.

  2. Select New to create a group.

  3. Create the link to your group, as follows:

    • For Business Central online, select the group in the Microsoft Entra security group name field.
    • For Business Central on-premises, select the group in the Windows group name field.

Note

The users show in the Members card on the FactBox pane or the Security Group Members page only if they're added as users in Business Central. To learn more about adding users, go to To add users or update user information and license assignments in Business Central.

Assign permissions to a security group

  1. On the Security Groups page, select the group, and then select the Permissions action.

  2. Assign permissions in the following ways:

    • To assign permission sets individually, in the Permission Set field, select the permissions to assign.
    • To assign multiple permission sets, select the Add multiple action, and then select the sets to assign.

  3. If you want the permission sets to apply only to a specific company, set the Company column to that company. If you want the permission set to apply to all companies, leave the Company column blank. Learn more.

Create Users According to Licenses
Set Up Business Central Access in Teams with Microsoft 365 Licenses
Learn about groups and access rights in Microsoft Entra ID
Microsoft Entra security groups

  • Last updated on