Microsoft/bcquality
1
0
Fork 0
mirror of https://github.com/microsoft/BCQuality.git synced 2026-10-07 07:36:54 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

fix(community/agents): align setup and permission samples

Browse source 
- mark agent setup pages as non-extensible where required
- narrow the agent profile by hiding an unrelated sales-order field
- define a dedicated read-only permission set for the sales review agent
- assign AL-defined permission sets with system scope and the owning app ID
- clarify the permission scope guidance for default access controls
This commit is contained in:
Stefano Demiliani 2026-08-24 15:31:27 +02:00
parent 25f6a3e008
commit 38d341eabb
7 changed files with 23 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
community/knowledge/agents/get-default-access-controls-least-privilege.md
View file

@ -15,7 +15,7 @@ application-area: [all]
## Best Practice
Insert only the permission sets the agent needs, with the correct Scope and App ID. Recreate any BC-only sets as AL permissionset objects first. Prefer a dedicated permission set over a full-user role.
Insert only the permission sets the agent needs. For an AL `permissionset` object, use `Scope::System` and the ID of the app that defines it. Recreate permission sets that exist only as user-defined configuration in Business Central as AL objects first. Prefer a dedicated permission set over a full-user role.
See sample: `get-default-access-controls-least-privilege.good.al`.