Adding InherentPermissions = 'RI' to a table object grants Read and Insert permissions and resolves permission errors, blocked posting, and list-page access without a new permission set

MB-820 By islever Editorial Last updated

Create entitlement and permission set objects

Short answer

A Adding InherentPermissions = 'RI' to MyTable grants Read and Insert, fixing the errors, blocked posting, and list access without a new permission set.

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. A company creates a Business Central app and a table named MyTable to store records when sales orders are posted. Users report the following issues: • The users receive permission errors related to MyTable. • Users are no longer able to post sales orders since installing the new app. • The users cannot access the list page created in MyTable. You need to resolve the user issues without creating new permission sets. You must use the principle of least privilege. Solution: In the MyTable object, add the property InherentPermissions = RI. Does the solution meet the goal?
  1. Yes Correct Answer
  2. No

Key Takeaways

InherentPermissions is the mechanism to embed the minimum needed permissions directly on the object. Because it does not create a new permission set, it meets the explicit constraint in the question.

The InherentPermissions property on a table object lets the table grant permissions to itself, following the principle of least privilege without requiring a separate permission set. The value 'RI' grants Read and Insert, which covers the listed issues: reading the table, inserting sales order records, and opening the list page.

Common mistake: Do not assume a single permission letter is enough; the issues include both reading and inserting, so the value must include both R and I. Also avoid creating a new permission set, which the question forbids.

Expert Analysis

Why the Answer Is Correct

Option A is correct because InherentPermissions = 'RI' provides Read and Insert on MyTable, which resolves the permission errors, restores the ability to post sales orders (insert), and allows access to the list page (read). This approach follows least privilege and, crucially, does not require creating a new permission set, satisfying the stated constraint. The community leans A (80 votes) and ivanrlg argues the solution meets the goal by providing the necessary permissions.

Why the Other Options Are Wrong

Option B (No) would be correct only if the permission scope were insufficient, but 'RI' actually covers all three reported issues, so rejecting the solution is wrong. There is no option to add a new permission set because the question explicitly forbids that approach. The key is recognizing that R plus I together address reading, inserting, and page access.

Community Comment Notes

ivanrlg supports A, stating the solution meets the goal by providing the necessary permissions without a new permission set and adhering to least privilege.

Official Reference

https://learn.microsoft.com/en-us/dynamics365/business-central/dev-itpro/developer/properties/devenv-inherentpermissions-property

This link opens the official vendor documentation in a new tab.

Community Votes

A
100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 3 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 3

  1. ivanrlg 👍 8 Answered A
    I think the answer is: A. Yes. the solution meets the goal by providing the necessary permissions to resolve the reported issues without creating new permission sets and adhering to the principle of least privilege
  2. leoizgon 👍 1
    https://learn.microsoft.com/en-us/dynamics365/business-central/dev-itpro/developer/properties/devenv-inherentpermissions-property?wt.mc_id=d365bc_inproduct_alextension
  3. javieroto 👍 1
    yes read and insert. modify is rim and its not min.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Snapshot debugging only fires on the next session of the configured user, so a session that never occurs means debugging never starts

S-grade

Use Get-BcArtifactUrl with -select Current to pull the most recent Business Central artifact URL when setting up a local development Docker container

S-grade

On a Role Center page, define the navigation bar (second-level navigation) in the area(Embedding) to link to other pages

S-grade

A single-tenant on-premises deployment dedicates one Business Central Server to each customer and stores the application and business data in the same database

S-grade

← Back to MB-820 Study Guide