User Roles & Permissions

The three permission sets that ship with the app and when to use each.

The app ships three assignable permission sets. Assign them under Users → Permission Sets.

Permission set	For whom	Scope
DATANORM Admin	Administration, implementation project	Full access: change setup, configure SFTP, import, approve, synchronise, write price lists and BOMs, run tests.
DATANORM User	Purchasing, master data	Day-to-day work: import files, review and approve staging, synchronise, create price lists and BOMs. The setup is readable but not editable.
DATANORM View	Business users, controlling, support	Read only: view import sessions, staging data, price lists and BOMs. No changes, no import.

What each role may do

Task	Admin	User	View
Change setup	yes	no	no
Configure SFTP	yes	no	no
Import a file	yes	yes	no
Approve staging and synchronise	yes	yes	no
Assign a vendor	yes	yes	no
Write price lists	yes	yes	no
Build part lists	yes	yes	no
View data	yes	yes	yes
Run tests	yes	no	no

An article import changes master data and writes price lists. Grant DATANORM User deliberately and use DATANORM View for everyone who only needs to look at the data.

Standard permissions also required

The app's permission sets include rights on the Business Central standard tables needed for importing – item, item unit of measure, unit of measure, price list header and line, and BOM component. Beyond that, a user who imports needs the usual rights of their business role, for example for vendors.