How-ToAdministration

How to Configure Security Groups in Business Central

Simplify permission management by using Entra ID security groups to assign and inherit permission sets in Business Central.

Daxly

Security Groups simplify permission management. Instead of assigning permissions to each user individually, permissions are assigned to a group.

Users inherit those permissions when they become members of the group.

Security groups are based on Microsoft Entra ID groups in online environments or Active Directory groups in on-premises installations.

Step 1: Create a Security Group

Security groups are normally created outside Business Central.

For cloud environments:

  1. Open the Microsoft 365 admin center or Microsoft Entra admin center.
  2. Create a new Security Group.
  3. Add members.
  1. Search for Security Groups.
  2. Select New.
  3. Link the entry to the existing Entra security group.

Users who belong to that group will appear in the member list.

Step 3: Assign Permission Sets

Permission sets define what actions users can perform.

On the security group page:

  1. Add Permission Sets.
  2. Optionally restrict them by company.

Examples:

  • SALES DOC, EDIT
  • CUSTOMER, READ
  • GENERAL LEDGER, FULL

All members of the group inherit these permissions.

Step 4: Review Permissions

Use the Permission Set by Security Group view to review:

  • Which permission sets are assigned
  • What individual permissions they include

Testing with a sample user helps confirm the setup works as expected.

New to Business Central? The Getting Started guide covers navigation and the Role Center setup relevant to any new user or implementer.