bcquality/microsoft/knowledge/security/compose-permission-sets-with-included-sets.good.al
Jesper Schulz-Wedde 347984ac74 Promote security knowledge from community to Microsoft layer
Pure git-mv relocation of the SECURITY domain from the community layer to the Microsoft layer. No content changes.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-06-25 14:03:22 +02:00

34 lines
971 B
AL

// Building blocks: focused per-concern, marked Assignable = false so administrators
// do not accidentally assign a fragment.
permissionset 50100 "Sales Tables - Read"
{
Assignable = false;
Permissions =
tabledata Customer = R,
tabledata "Sales Header" = R,
tabledata "Sales Line" = R;
}
permissionset 50101 "Sales Tables - Edit"
{
Assignable = false;
IncludedPermissionSets = "Sales Tables - Read";
Permissions =
tabledata Customer = IM,
tabledata "Sales Header" = IMD,
tabledata "Sales Line" = IMD;
}
// Role-shaped, Assignable = true, composed from building blocks.
// Adding a new Sales table means editing one building block; both roles inherit the change.
permissionset 50110 "Sales Order Processor"
{
Assignable = true;
IncludedPermissionSets = "Sales Tables - Edit";
}
permissionset 50111 "Sales Viewer"
{
Assignable = true;
IncludedPermissionSets = "Sales Tables - Read";
}