Permission set

A permission set in Business Central is the unit of security — a named bundle of RIMDX rights (Read, Insert, Modify, Delete, eXecute) on tables, pages, codeunits, reports, and other database objects. Users get effective permissions by being assigned one or more permission sets, optionally bundled into user groups for easier administration. Microsoft ships built-in permission sets — SUPER, BASIC, SETUP, area-specific (SALES, PURCH, FA, etc.); customers copy and edit, or write new permission sets in AL. Security filters within a permission set add row-level restrictions. Modern practice grants table writes through indirect permission (via codeunit execution rights) rather than direct write rights, matching how Microsoft's standard code is designed.