Decorating an event subscriber with InherentPermissions 'R' is insufficient because users still need Insert permission to post sales orders

Create entitlement and permission set objects
Answer Correct answer: B - the event subscriber only adds Read ('R') permission, but users also need Insert to post sales orders, so the solution does not fully meet the goal.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. A company creates a Business Central app and a table named MyTable to store records when sales orders are posted. Users report the following issues: • The users receive permission errors related to MyTable. • Users are no longer able to post sales orders since installing the new app. • The users cannot access the list page created in MyTable. You need to resolve the user issues without creating new permission sets. You must use the principle of least privilege. Solution: Decorate the event subscriber used for inserting data in MyTable by entering (InherentPermissions(PermissionObjectType::TableData. Database::MyTable. 'R')] Does the solution meet the goal?

  1. Yes
  2. No Correct Answer

Community Votes

B
100%

100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

InherentPermissions must grant every permission the task needs. Here the insert path is the missing piece, so a Read-only grant fails the goal even though it partially addresses permission errors and list access.

This question reuses the same scenario but applies InherentPermissions only at the event subscriber level with the value 'R' (Read). Because the reported issue includes the inability to post sales orders, which requires Insert, granting only Read leaves the core problem unresolved.

Do not be misled by the fact that Read helps with some errors; the question asks whether the solution meets the goal, and the missing Insert means it does not. Always map each reported issue to a required permission letter.

Community Discussion (4 comments)

5e11cb9 👍 18
The solution presented here is to add inherent permissions of type "Read". This does not solve the problem of permission errors when INSERTING data. Correct answer should be B "No"
e3b13ec 👍 2 Selected: B
Insert is Missing -> Answer B
ddc215f 👍 1
a table named MyTable to store records. So indeed B is the right answer. Type 'R' does not solve the problem
edbb578 👍 3 Selected: B
read permission is only a half of the issues .... need insert too ... the answer is "No"

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

Option B is correct because the proposed solution grants only Read ('R') permission through the event subscriber, but posting sales orders requires Insert permission on MyTable. Since the insert capability is still missing, the solution does not resolve all three user issues and therefore does not meet the goal. The community strongly favors B (100 votes), and 5e11cb9 explains that 'Insert is Missing,' so the answer is No.

Why the Other Options Are Wrong

Option A (Yes) would only be valid if Read alone solved every issue, but the blocked sales-order posting needs Insert, which is absent here. The earlier question in the series showed that 'RI' works, which highlights by contrast that 'R' alone is incomplete. The principle is that the granted permission set must cover reading, inserting, and page access together.

Community Comment Notes

5e11cb9 states the solution adds only Read and 'Insert is Missing,' and edbb578 notes that read permission covers only half the issues, both supporting B.

Official Reference

Related Analysis

← Back to MB-820 Study Guide