Simple Agent Designer Documentation
Index

Permissions

Simple Agent Designer includes a dedicated permission set that controls access to all extension features. This page explains how to configure user permissions.

The AI Accountant Permission Set

Simple Agent Designer provides a single, comprehensive permission set:

Permission Set ID Assignable Description
AI Accountant Hgd 70310800 Yes Full access to all Simple Agent Designer features

This permission set (object AI Accountant Hgd, ID 70310800, caption "Simple Agent Designer", Assignable) grants Execute, Read, Insert, Modify, and Delete permissions on all Simple Agent Designer objects, including:

  • All core tables (Setup, Workers, Workloads, Workload Types, Process Activity, etc.)
  • All codeunits (Orchestration, AI Management, Worker implementations, Data splitters, and the Agent SQL query codeunits)
  • All pages (Setup, Worker List, Workload List, Role Center, Process pages, etc.)
  • Tool Designer objects (Tool Designer table, pages, codeunits)
  • Conversations (saved/resumable chat history tables and pages)
  • Skills (Skills tables and pages)
  • The QR Code Generator and Mobile API pages used by the mobile app connection
  • Integration objects (Agent Work tables, Role Center pages)

Assigning the Permission Set

To a Single User

  1. Search for Users in the Tell Me search bar
  2. Select the user who needs access to Simple Agent Designer
  3. Choose Permission Sets in the user card
  4. Add a new line and select AI Accountant Hgd from the permission set list
  5. Close the user card

To Multiple Users via User Groups

  1. Search for Permission Sets in the Tell Me search bar
  2. Find AI Accountant Hgd
  3. Choose User by Permission Set to see which users currently have the permission set
  4. Add or remove users as needed

Additional Permissions Required

The AI Accountant Hgd permission set covers only Simple Agent Designer objects. Depending on what your agents do, users may also need standard Business Central permissions for:

General Ledger Operations

If agents create journal entries:

  • Read/Write access to General Journal tables
  • Access to the configured General Journal Template and Batch
  • Access to the configured No. Series
  • Posting permissions if agents trigger posting

Sales Operations

If agents create sales documents:

  • Read/Write access to Sales Header and Sales Line tables
  • Access to relevant No. Series for sales documents
  • Customer table read access

Purchase Operations

If agents create purchase documents:

  • Read/Write access to Purchase Header and Purchase Line tables
  • Access to relevant No. Series for purchase documents
  • Vendor table read access

Data Access for Tools

If agents use tools to query or modify Business Central data:

  • Read access to any tables the agents need to query (Customers, Vendors, Items, etc.)
  • Write access to any tables the agents need to modify
  • The specific permissions depend on which tools are enabled and how your agents are configured

Permission Considerations

Principle of Least Privilege

While the AI Accountant Hgd permission set is comprehensive for the extension itself, consider the following for your standard BC permissions:

  • Grant agents access only to the tables and data they need
  • If an agent only reads customer data, the user running that agent only needs read access to the Customer table
  • Review what tools are enabled and ensure permissions align with tool capabilities

Administrator vs. User Access

Role Recommended Permissions
Administrator AI Accountant Hgd + SUPER or relevant admin permission sets
Agent Designer AI Accountant Hgd + Read access to tables used in workloads
Workload Operator AI Accountant Hgd + Read/Write access to tables agents interact with
Viewer Read-only access to workload and activity tables (custom permission set needed)

Background Processing

When workloads are processed in the background, they run under the user context that initiated the process. Ensure that user has:

  • The AI Accountant Hgd permission set
  • All standard BC permissions needed for the operations the agents will perform
  • Session permissions for background task execution

Verifying Permissions

To verify a user has the correct permissions:

  1. Sign in as the user
  2. Search for "Agent Setup" — if the page opens, the AI Accountant permission set is active
  3. Try creating a test workload and processing it
  4. Check for permission errors in the process activity log

If you encounter permission errors during workload processing, review the error message to identify which table or operation requires additional permissions.