See how it works
Click a topic and Controlly explains how Advanced Permissions Management works.
Advanced Permissions Management records every change instantly, even when an app update quietly changes something. Who did it and when is right there.
Result for you
A clear answer to: what changed since the last app update or review period?
See it in action
Watch the full demo video and see how every permission change becomes visible, explainable and reversible.
Permission sets change. Do you know when, and by whom?
Any administrator can change a permission set in Business Central at any time, and app updates can quietly change permission sets too. Business Central keeps no history of who changed what, when, or why, so one unnoticed change can give a user access to sensitive data without anyone knowing.
Edits to permission sets leave no trail. When access is wrong, finding the cause means guessing.
App updates can quietly change permission sets too, without any user editing anything.
A single change can give a user access to sensitive data, and nobody would know.
See every change at a glance
The dashboard lists every tracked permission set with its type, its baseline date and three separate change counters. One click takes you into the history, the blame view, the version compare or a review, already filtered to that set.
- Three counters per set: permission, permission set and relation changes
- Linked users shown next to every permission set
- Filters for sets in use and sets with unreviewed changes
How it works
Advanced Permissions Management runs in the background of Business Central and does not change how Business Central evaluates permissions.
Changes made through the standard pages are recorded the moment they happen.
An hourly check catches changes introduced by app updates.
Nothing needs to be logged by hand. When a baseline is reset, the old history is archived and never lost.
Everything you need to stay in control of permission sets
Change tracking, review, simulation, quality checks and rollback in one app, running alongside the Business Central permission model without changing how it works.
Automatic change tracking
Every change, the moment it happens
Changes to permission sets, permission lines and Include/Exclude relations are tracked automatically, including changes made by Microsoft and partner app updates.
Who changed what
Know who last touched a permission
See who last changed any permission and when, with a full timeline for each permission set. Quick successive edits are grouped into one change moment.
Version compare
Compare any two moments in time
Pick two points in time for a permission set and see side by side what was added, removed or modified, even across a baseline reset.
Review workflow
Review and sign off per period
Review changes in structured review periods. Mark each change as reviewed or flagged, add comments, and close each period with a permanent audit record.
What-if simulation
See the impact before it goes live
Simulate a change before it goes live and see exactly which permission sets and users it would affect.
Quality review
Rule based checks, same result every time
A fixed set of rules checks one or many permission sets and returns Info, Warning and Critical findings in plain language. It tells truly open access apart from broad access that has been deliberately restricted.
Rollback
Undo a mistake in a few steps
Restore a user-defined permission set to an earlier, known-good version. A preview shows exactly how many lines will be inserted, modified or removed before you confirm.
Permission Set Generator
Start from a ready-made baseline
A guided wizard builds a clean, task-based set of permission sets from a curated library, in English, Dutch, German, French or Spanish. Sensitive financial data is protected by default.
Copilot naming
Clear names, suggested for you
Let Copilot suggest clear names and business-friendly descriptions for one or many permission sets, in the language you choose.
What is in it for you?
Application Managers need a clear answer to one question: what changed in our permission sets since the last app update or review period?
- One clear answer: filter the change explorer on any period, set, user or change type
- App update visibility: changes made by app updates show up next to manual edits
- Full history: archived history stays available after a baseline reset
BC Administrators get faster day-to-day permission management:
- Compare versions: see exactly what differs between two points in time
- See who last touched a permission: per line, with date and user
- Undo mistakes: roll a user-defined set back to an earlier version
Auditors and Compliance Officers get a filterable, exportable trail of every permission change for a chosen period, with review and sign off status attached.
- Complete trail: who changed which permission, and when
- Review sessions: every change is Open, Reviewed or Flagged, with comments
- Immutable session log: final statistics are stored when a session is completed
Good to know
Review is a record, not a gate
Business Central cannot hold a permission change until it is reviewed. Review status documents your governance. It never blocks or reverses the change itself.
What rollback restores
Rollback restores the permission lines and relations of user-defined permission sets. Renames and user assignments stay as they are, and system permission sets cannot be rolled back.
Trial or license
Change tracking, review, version compare and rollback work straight away. What-if simulation and quality review require an active trial or license.
Start taking control of your permission sets.
- Runs alongside the Business Central permission model
- Guided onboarding wizard on first use
- Start with a 30-day trial
Built by 2-Controlware, specialists in authorization management for Microsoft Dynamics.
Discover our complete package
In addition to Advanced Permissions Management, we offer the Authorization Box, Field Security, Field Validation and the Advanced Permissions Recorder to help you set up, manage and monitor your authorizations.
Using Field Security, Filter Security, Action Security or Field Validation as well? Their coverage appears for each permission set on the same dashboard, with no extra setup. Without them, the app works on its own.
Authorization Box
Assign, manage, and monitor authorizations
The authorization solution for Microsoft Dynamics, for a more manageable and controllable environment.
Field Security
Authorize on field and dataset level
Optimize the standard permissions structure at field, filter and action level.
Field Validation
Field validation on user level
Set up business rules for your data quality, so data complies before it is used in further processes.
Advanced Permissions Recorder
Record, clean up and target permissions
Record the permissions of other users in a few clicks and clean up unnecessary entries automatically.
