Hi, helpful video! Looking at this new setup, if there are multiple companies, do we have to create a Security Group per company? else the user assigned to the security group will inherit all permissions for all companies? Am I right?
security groups are brought in bc from microsoft 365. or microsoft entra (azure). Once in BC you can assign permission sets. when you assign permission sets to security groups you can pick the company. Or you can assign company on the user card.
Hi, thanks for your reply. If I have one security group and I added a member, and I updated the permission of this security group and set up two different sets of permission per company, the members inside this security group will inherit all permissions. Means the member will have access to both companies? Yes I can assign company permission on user card. Just wondering how the company permission on Security Groups will be.
@@darnaO5 security groups are like user groups, except security groups come from Microsoft 365 or Entra already with members and are for all Microsoft products not just Business Central. You just need to assign permission sets and these can have different companies. e.g. accounts payable security group can have payable related permissions for company A and read sales related permissions on company b or on all companies. if you did not get a sandbox with v23 you can create a Cronus one and you can check the video again and Microsoft doc (mentioned in the description of the video).
No. That would not be good. Remember, users can assign themselves any profile. If profiles would be associated with security groups when users assign themselves a new profile, they would get different permissions. No bueono!
Hi, helpful video! Looking at this new setup, if there are multiple companies, do we have to create a Security Group per company? else the user assigned to the security group will inherit all permissions for all companies? Am I right?
security groups are brought in bc from microsoft 365. or microsoft entra (azure). Once in BC you can assign permission sets. when you assign permission sets to security groups you can pick the company. Or you can assign company on the user card.
Hi, thanks for your reply.
If I have one security group and I added a member, and I updated the permission of this security group and set up two different sets of permission per company, the members inside this security group will inherit all permissions. Means the member will have access to both companies?
Yes I can assign company permission on user card. Just wondering how the company permission on Security Groups will be.
@@darnaO5 security groups are like user groups, except security groups come from Microsoft 365 or Entra already with members and are for all Microsoft products not just Business Central. You just need to assign permission sets and these can have different companies. e.g. accounts payable security group can have payable related permissions for company A and read sales related permissions on company b or on all companies. if you did not get a sandbox with v23 you can create a Cronus one and you can check the video again and Microsoft doc (mentioned in the description of the video).
@@BusinessCentralMusings hi, thank you for the replies! really helpful. I'll check the resources you mentioned. Have a great day!
Great content. Very detailed and concise explanation. Thank you!
Check out my blog post on Security Groups:
svirlan.com/security-groups-the-new-way-of-controlling-access-to-business-central/
How about assigning profiles to security groups? Is there an option to set a default profile associated to security group?
No. That would not be good. Remember, users can assign themselves any profile. If profiles would be associated with security groups when users assign themselves a new profile, they would get different permissions. No bueono!