skill-permissions

Generate and validate AL permission sets for Business Central extensions using least-privilege principles. This Skill applies pattern-driven design for base, user, and admin roles to ensure security and compliance.

AL and XML permission set formats define Business Central security roles differently. The Skill guides generation and extension for both formats, covering indirect permissions, test permissions, and safeguards against accidental broad access.

Prevent accidental broad access in BC permission sets by applying least-privilege principles and following a human-in-the-loop gating workflow. This validates indirect permissions and generates governance artifacts for security reviews.

Yes, least-privilege permission design supports permission set extensions for existing Business Central roles. It applies to security reviews and updates, ensuring indirect and test permissions meet governance requirements.

You need human-in-the-loop gating for AL permission design during security reviews, new extension creation, and updates to existing roles. This workflow ensures permission sets are validated and documented before deployment.