I am trying to set permissions so that a user can create a purchase quote, but cannot create a purchase order. I tried doing the recording and just creating a quote and that’s it, I didn’t click make to order. But that didn’t work, the user can still create a PO. How do I make it so a user can create a quote and not a PO?
Look at the permission set created by the recording and make sure the user doesn’t have the Insert or Modify permissions on Table Data 38 (Purchase Header) and Table Data 39 (Purchase Line).
Those same tables are used for quotes. Along this same idea, one approach might be to build a permission set that excluded access to the Purchase Order pages.
1 Like
How would you exclude access to a page?
Create a permission set that grants access to all pages except the ones to which you want to deny access. Remove the users access to any permission sets that include Page 0
1 Like
One trick you could use is to have a permission on table 38 for INSERT with a filter on the Document Type column = Quote for users that you want to be able to create quote and one filter on a READ for Order. The problem is you would have to have multiple permission sets since you cannot have multiple tabledata items for an object in one permission set. The page permission is also a good approach, but you have to make sure that all the pages where you can create a PO are handled.
Is there a permission set like D365 Basic that will override your custom permission set. I the custom one set so that that cannot enter anything in the PO but its not working and the user still can.
To enable users to create quotes, grant INSERT permission on table 38 with a filter on Document Type = Quote. For reading orders, set a READ filter. However, note that multiple permission sets are required as you cannot have multiple tabledata items for one permission set. Alternatively, consider using page permissions, but ensure all relevant pages for creating POs are covered.