{ "title": "Codeunit 9002 Permission Manager", "url": "https://jonas-paprotka.de/ref/codeunit/9002-permission-manager/", "author": "Jonas Paprotka", "license": "Content © 2026 Jonas Paprotka. Quote freely with attribution and a link.", "subject": "Microsoft Dynamics 365 Business Central", "checked": "2026-09-20", "source": { "feed": "https://dynamicssmb2.pkgs.visualstudio.com/DynamicsBCPublicFeeds/_packaging/MSSymbols/nuget/v3/index.json", "package": "Microsoft.BaseApplication.symbols.437dbf0e-84ff-417a-965d-ed2bb9650972", "build": "28.5.54151.54365", "code": { "29": { "url": "https://jonas-paprotka.de/ref/codeunit/9002-permission-manager/source/29/", "repo": "https://github.com/microsoft/BCApps", "branch": "releases/29.x", "commit": "a66254c3b8b5bb1cea290dc8f9d097aec4381153", "path": "src/Layers/W1/BaseApp/Modules/System/PermissionSets/PermissionManager.Codeunit.al", "license": "MIT" } }, "note": "Presence per major, highest build of each; 17 is the oldest major on the feed. Local procedures are not listed." }, "object": { "type": "codeunit", "id": 9002, "name": "Permission Manager", "app": "Base Application", "appByVersion": [ { "app": "Base Application", "from": 17 } ], "nameByVersion": [ { "name": "Permission Manager", "from": 17 } ], "namespace": "System.Security.AccessControl", "versions": "17-28", "majors": [ 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28 ], "extends": null, "sourceTable": null, "sourceFile": "Modules/System/PermissionSets/PermissionManager.Codeunit.al", "obsolete": null, "obsoleteSeenFrom": null, "byVersion": { "17": { "app": "base-application", "name": "Permission Manager", "ns": "", "obsolete": null, "target": "", "sourceTable": "", "counts": { "fields": 0, "keys": 0, "methods": 17, "values": 0 }, "stub": false }, "18": { "app": "base-application", "name": "Permission Manager", "ns": "", "obsolete": null, "target": "", "sourceTable": "", "counts": { "fields": 0, "keys": 0, "methods": 17, "values": 0 }, "stub": false }, "19": { "app": "base-application", "name": "Permission Manager", "ns": "", "obsolete": null, "target": "", "sourceTable": "", "counts": { "fields": 0, "keys": 0, "methods": 16, "values": 0 }, "stub": false }, "20": { "app": "base-application", "name": "Permission Manager", "ns": "", "obsolete": null, "target": "", "sourceTable": "", "counts": { "fields": 0, "keys": 0, "methods": 17, "values": 0 }, "stub": false }, "21": { "app": "base-application", "name": "Permission Manager", "ns": "", "obsolete": null, "target": "", "sourceTable": "", "counts": { "fields": 0, "keys": 0, "methods": 16, "values": 0 }, "stub": false }, "22": { "app": "base-application", "name": "Permission Manager", "ns": "", "obsolete": null, "target": "", "sourceTable": "", "counts": { "fields": 0, "keys": 0, "methods": 20, "values": 0 }, "stub": false }, "23": { "app": "base-application", "name": "Permission Manager", "ns": "System.Security.AccessControl", "obsolete": null, "target": "", "sourceTable": "", "counts": { "fields": 0, "keys": 0, "methods": 20, "values": 0 }, "stub": false }, "24": { "app": "base-application", "name": "Permission Manager", "ns": "System.Security.AccessControl", "obsolete": null, "target": "", "sourceTable": "", "counts": { "fields": 0, "keys": 0, "methods": 20, "values": 0 }, "stub": false }, "25": { "app": "base-application", "name": "Permission Manager", "ns": "System.Security.AccessControl", "obsolete": null, "target": "", "sourceTable": "", "counts": { "fields": 0, "keys": 0, "methods": 13, "values": 0 }, "stub": false }, "26": { "app": "base-application", "name": "Permission Manager", "ns": "System.Security.AccessControl", "obsolete": null, "target": "", "sourceTable": "", "counts": { "fields": 0, "keys": 0, "methods": 13, "values": 0 }, "stub": false }, "27": { "app": "base-application", "name": "Permission Manager", "ns": "System.Security.AccessControl", "obsolete": null, "target": "", "sourceTable": "", "counts": { "fields": 0, "keys": 0, "methods": 13, "values": 0 }, "stub": false }, "28": { "app": "base-application", "name": "Permission Manager", "ns": "System.Security.AccessControl", "obsolete": null, "target": "", "sourceTable": "", "counts": { "fields": 0, "keys": 0, "methods": 13, "values": 0 }, "stub": false } }, "fields": [], "keys": [], "procedures": [ { "name": "AddUserToUserGroup", "sig": "(Guid, Code[20], Text[30])", "returns": "", "kind": "procedure", "access": "public", "obsolete": { "state": "Pending", "reason": "User groups are replaced with security groups, where group membership is specified in M365 admin portal.", "tag": "22.0" }, "majors": [ 17, 18, 19, 20, 21, 22, 23, 24 ], "range": "17-24", "first": 17, "last": 24, "obsoleteSince": 22, "spans": [ { "from": 17, "to": 21, "returns": "", "kind": "procedure", "access": "public", "obsolete": null }, { "from": 22, "to": 24, "returns": "", "kind": "procedure", "access": "public", "obsolete": { "state": "Pending", "reason": "User groups are replaced with security groups, where group membership is specified in M365 admin portal.", "tag": "22.0" } } ] }, { "name": "AddUserToDefaultUserGroups", "sig": "(Guid)", "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": { "state": "Pending", "reason": "Replaced with the AssignDefaultPermissionsToUser procedure.", "tag": "22.0" }, "majors": [ 17, 18, 19, 20, 21, 22, 23, 24 ], "range": "17-24", "first": 17, "last": 24, "obsoleteSince": 22, "spans": [ { "from": 17, "to": 21, "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": null }, { "from": 22, "to": 24, "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": { "state": "Pending", "reason": "Replaced with the AssignDefaultPermissionsToUser procedure.", "tag": "22.0" } } ] }, { "name": "AddUserToDefaultUserGroupsForCompany", "sig": "(Guid, Text[30])", "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": { "state": "Pending", "reason": "Replaced with the AssignDefaultPermissionsToUser procedure.", "tag": "22.0" }, "majors": [ 17, 18, 19, 20, 21, 22, 23, 24 ], "range": "17-24", "first": 17, "last": 24, "obsoleteSince": 22, "spans": [ { "from": 17, "to": 21, "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": null }, { "from": 22, "to": 24, "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": { "state": "Pending", "reason": "Replaced with the AssignDefaultPermissionsToUser procedure.", "tag": "22.0" } } ] }, { "name": "ResetUserToDefaultUserGroups", "sig": "(Guid)", "returns": "", "kind": "procedure", "access": "public", "obsolete": { "state": "Pending", "reason": "Replaced with the ResetUserToDefaultPermissions procedure.", "tag": "22.0" }, "majors": [ 17, 18, 19, 20, 21, 22, 23, 24 ], "range": "17-24", "first": 17, "last": 24, "obsoleteSince": 22, "spans": [ { "from": 17, "to": 21, "returns": "", "kind": "procedure", "access": "public", "obsolete": null }, { "from": 22, "to": 24, "returns": "", "kind": "procedure", "access": "public", "obsolete": { "state": "Pending", "reason": "Replaced with the ResetUserToDefaultPermissions procedure.", "tag": "22.0" } } ] }, { "name": "GetOfficePortalUserAdminUrl", "sig": "()", "returns": "Text", "kind": "procedure", "access": "public", "obsolete": null, "majors": [ 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28 ], "range": "17-28", "first": 17, "last": 28, "obsoleteSince": null, "spans": [ { "from": 17, "to": 28, "returns": "Text", "kind": "procedure", "access": "public", "obsolete": null } ] }, { "name": "UpdateUserAccessForSaaS", "sig": "(Guid)", "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": null, "majors": [ 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28 ], "range": "17-28", "first": 17, "last": 28, "obsoleteSince": null, "spans": [ { "from": 17, "to": 28, "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": null } ] }, { "name": "AddUserGroupFromExtension", "sig": "(Code[20], Code[20], Guid)", "returns": "", "kind": "procedure", "access": "public", "obsolete": { "state": "Pending", "reason": "User groups are replaced with security groups, use the method Add on the Security Group codeunit.", "tag": "22.0" }, "majors": [ 17, 18, 19, 20, 21, 22, 23, 24 ], "range": "17-24", "first": 17, "last": 24, "obsoleteSince": 22, "spans": [ { "from": 17, "to": 21, "returns": "", "kind": "procedure", "access": "public", "obsolete": null }, { "from": 22, "to": 24, "returns": "", "kind": "procedure", "access": "public", "obsolete": { "state": "Pending", "reason": "User groups are replaced with security groups, use the method Add on the Security Group codeunit.", "tag": "22.0" } } ] }, { "name": "GetDefaultProfileID", "sig": "(Guid, var Record All Profile)", "returns": "", "kind": "procedure", "access": "public", "obsolete": { "state": "Pending", "reason": "This procedure has been moved into codeunit \"Conf./Personalization Mgt.\"", "tag": "26.0" }, "majors": [ 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28 ], "range": "17-28", "first": 17, "last": 28, "obsoleteSince": 27, "spans": [ { "from": 17, "to": 26, "returns": "", "kind": "procedure", "access": "public", "obsolete": null }, { "from": 27, "to": 28, "returns": "", "kind": "procedure", "access": "public", "obsolete": { "state": "Pending", "reason": "This procedure has been moved into codeunit \"Conf./Personalization Mgt.\"", "tag": "26.0" } } ] }, { "name": "CanCurrentUserManagePlansAndGroups", "sig": "()", "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": null, "majors": [ 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28 ], "range": "17-28", "first": 17, "last": 28, "obsoleteSince": null, "spans": [ { "from": 17, "to": 28, "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": null } ] }, { "name": "CanManageUsersOnTenant", "sig": "(Guid)", "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": { "state": "Pending", "reason": "Procedure is now part of codeunit User Permissions (System Application)", "tag": "16.0" }, "majors": [ 17, 18 ], "range": "17-18", "first": 17, "last": 18, "obsoleteSince": 17, "spans": [ { "from": 17, "to": 18, "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": { "state": "Pending", "reason": "Procedure is now part of codeunit User Permissions (System Application)", "tag": "16.0" } } ] }, { "name": "GenerateHashForPermissionSet", "sig": "(Code[20])", "returns": "Text[250]", "kind": "procedure", "access": "public", "obsolete": null, "majors": [ 17, 18, 19, 20, 21, 22 ], "range": "17-22", "first": 17, "last": 22, "obsoleteSince": null, "spans": [ { "from": 17, "to": 22, "returns": "Text[250]", "kind": "procedure", "access": "public", "obsolete": null } ] }, { "name": "UpdateHashForPermissionSet", "sig": "(Code[20])", "returns": "", "kind": "procedure", "access": "public", "obsolete": { "state": "Pending", "reason": "The Permission Set table will be read only in the new permission system. The hash is no longer stored but recalculates every time.", "tag": "18.0" }, "majors": [ 17, 18, 19, 20 ], "range": "17-20", "first": 17, "last": 20, "obsoleteSince": 18, "spans": [ { "from": 17, "to": 17, "returns": "", "kind": "procedure", "access": "public", "obsolete": null }, { "from": 18, "to": 20, "returns": "", "kind": "procedure", "access": "public", "obsolete": { "state": "Pending", "reason": "The Permission Set table will be read only in the new permission system. The hash is no longer stored but recalculates every time.", "tag": "18.0" } } ] }, { "name": "IsFirstPermissionHigherThanSecond", "sig": "(Option, Option)", "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": null, "majors": [ 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28 ], "range": "17-28", "first": 17, "last": 28, "obsoleteSince": null, "spans": [ { "from": 17, "to": 28, "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": null } ] }, { "name": "ResetUsersToIntelligentCloudUserGroup", "sig": "()", "returns": "", "kind": "procedure", "access": "public", "obsolete": { "state": "Pending", "reason": "Use the ResetUsersToIntelligentCloud procedure instead.", "tag": "22.0" }, "majors": [ 17, 18, 19, 20, 21, 22, 23, 24 ], "range": "17-24", "first": 17, "last": 24, "obsoleteSince": 22, "spans": [ { "from": 17, "to": 21, "returns": "", "kind": "procedure", "access": "public", "obsolete": null }, { "from": 22, "to": 24, "returns": "", "kind": "procedure", "access": "public", "obsolete": { "state": "Pending", "reason": "Use the ResetUsersToIntelligentCloud procedure instead.", "tag": "22.0" } } ] }, { "name": "IsIntelligentCloud", "sig": "()", "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": null, "majors": [ 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28 ], "range": "17-28", "first": 17, "last": 28, "obsoleteSince": null, "spans": [ { "from": 17, "to": 28, "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": null } ] }, { "name": "SetTestabilityIntelligentCloud", "sig": "(Boolean)", "returns": "", "kind": "procedure", "access": "public", "obsolete": null, "majors": [ 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28 ], "range": "17-28", "first": 17, "last": 28, "obsoleteSince": null, "spans": [ { "from": 17, "to": 28, "returns": "", "kind": "procedure", "access": "public", "obsolete": null } ] }, { "name": "CheckCurrentUserCanModifyUser", "sig": "(var Record User, var Record User, Boolean)", "returns": "", "kind": "procedure", "access": "public", "obsolete": null, "majors": [ 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28 ], "range": "17-28", "first": 17, "last": 28, "obsoleteSince": null, "spans": [ { "from": 17, "to": 28, "returns": "", "kind": "procedure", "access": "public", "obsolete": null } ] }, { "name": "AssignDefaultPermissionsToUser", "sig": "(Guid)", "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": null, "majors": [ 22, 23, 24, 25, 26, 27, 28 ], "range": "22-28", "first": 22, "last": 28, "obsoleteSince": null, "spans": [ { "from": 22, "to": 28, "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": null } ] }, { "name": "AssignDefaultPermissionsToUser", "sig": "(Guid, Text[30])", "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": null, "majors": [ 22, 23, 24, 25, 26, 27, 28 ], "range": "22-28", "first": 22, "last": 28, "obsoleteSince": null, "spans": [ { "from": 22, "to": 28, "returns": "Boolean", "kind": "procedure", "access": "public", "obsolete": null } ] }, { "name": "ResetUserToDefaultPermissions", "sig": "(Guid)", "returns": "", "kind": "procedure", "access": "public", "obsolete": null, "majors": [ 22, 23, 24, 25, 26, 27, 28 ], "range": "22-28", "first": 22, "last": 28, "obsoleteSince": null, "spans": [ { "from": 22, "to": 28, "returns": "", "kind": "procedure", "access": "public", "obsolete": null } ] }, { "name": "ResetUsersToIntelligentCloudPermissions", "sig": "()", "returns": "", "kind": "procedure", "access": "public", "obsolete": null, "majors": [ 22, 23, 24, 25, 26, 27, 28 ], "range": "22-28", "first": 22, "last": 28, "obsoleteSince": null, "spans": [ { "from": 22, "to": 28, "returns": "", "kind": "procedure", "access": "public", "obsolete": null } ] }, { "name": "GenerateHashForPermissionSet", "sig": "(Code[30])", "returns": "Text[250]", "kind": "procedure", "access": "public", "obsolete": null, "majors": [ 23, 24, 25, 26, 27, 28 ], "range": "23-28", "first": 23, "last": 28, "obsoleteSince": null, "spans": [ { "from": 23, "to": 28, "returns": "Text[250]", "kind": "procedure", "access": "public", "obsolete": null } ] } ], "events": [ { "name": "OnAssignCustomPermissionsToUser", "sig": "(Guid, Guid, var Boolean)", "returns": "", "kind": "integrationevent", "access": "local", "obsolete": { "state": "Pending", "reason": "Custom permissions are handled within BaseApp and System Application.", "tag": "22.0" }, "majors": [ 20, 21, 22, 23, 24 ], "range": "20-24", "first": 20, "last": 24, "obsoleteSince": 22, "spans": [ { "from": 20, "to": 21, "returns": "", "kind": "integrationevent", "access": "local", "obsolete": null }, { "from": 22, "to": 24, "returns": "", "kind": "integrationevent", "access": "local", "obsolete": { "state": "Pending", "reason": "Custom permissions are handled within BaseApp and System Application.", "tag": "22.0" } } ] } ], "values": [] } }