Dynamics 365 Business Central: Reporting and data analysis - Use new APIs for analyzing permissions for auditors and IT staff

🚨 The Signal: New read-only APIs in Dynamics 365 Business Central allow external tools like Power BI and Copilot Studio to query permission data. This enhances auditing and reporting capabilities for security teams.

The Impact

Security teams and auditors gain enhanced visibility into Business Central permissions, reducing the risk of undetected privilege escalation or misconfigurations.

  • Security teams: Improved visibility into permission sets reduces misconfiguration risk.
  • Auditors: Streamlined access to permission data simplifies compliance checks.
  • IT staff: Better tools for analysing user and group permissions.
  • Copilot agents: Can be developed to monitor and report on permission changes.

The Action

  1. Identify existing security-related permission sets in Business Central.
  2. Create or modify a permission set to include the new permission APIs for auditors/IT staff.
  3. Assign this new permission set to relevant security and auditing personnel.
  4. Integrate external reporting tools (e.g., Power BI) or Copilot agents to consume the new APIs.
  5. Review and establish regular auditing processes using the new API capabilities.

Domain: Other · Impact: medium · Workload: Other · Essential Eight: Restrict Administrative Privileges · ISM: ISM-0445, ISM-1175, ISM-1380, ISM-1507, ISM-1508, ISM-1509, ISM-1647, ISM-1648, ISM-1650, ISM-1686, ISM-1688, ISM-1689, ISM-1883, ISM-1897, ISM-1898