Release 7.2 (October 2026) brings one new app and support for Business Central 29. This page is the short version. The full list is in the release notes.
Advanced Permissions Management is new. It answers the question "who changed which permissions, when and why?". It needs Business Central 27 or later.
Who changed this permission? When? And did anyone ever review it? These are the questions every auditor asks, and they are hard to answer. Standard Business Central logs changes to your own permission sets in a technical log that is not built for review. Changes to system permission sets are not logged at all. Yet any administrator, and any app update, can change permissions at any time. Advanced Permissions Management, by 2-Controlware, turns that information into something you can read, review, and act on. This is your starting point: the role center. It tells you at once how many permission changes are waiting for review. See how many permission sets you have, which ones are in use, and which carry broad permissions. And follow your reviews: unreviewed changes, open reviews, and completed reviews. Start with the dashboard. It lists every permission set, how many permissions it contains, how often it changed, and how many users depend on it. Every change is counted the moment it happens, so nothing slips by unnoticed. Watch what happens when we change something. In standard Business Central, we add delete permissions to a sales permission set, just like an administrator would. Back in the dashboard, the change is already counted, without anyone having to report it. The change log shows who did it, when, and exactly what changed, before and after. Nothing to configure, and nothing to interpret. The same applies to the system permission sets that Microsoft and apps provide, which standard Business Central does not log at all. When an app update widens access, it is recorded and attributed to the update, instead of slipping through unnoticed. Who last touched the vendor permissions? One click shows a name and a date on every line, so you always know who to ask. Version compare puts any two moments side by side, so you can see how a permission set looked before and after, even across a baseline reset. History is archived, never lost. Then comes the part auditors ask for first: review. Group the recent changes into a review period, and work through them as a queue. Flag a change as suspicious, and record your decision: a mitigating control, or the action to change the permission. and close the session. A review does not block a change, but it is your permanent record that someone looked, and what they concluded. Quality analysis checks your permission sets against fixed rules, so you do not have to read every line yourself. Both of these sets give access to every table. The legacy set is critical. The base layer is not critical: excluded permissions limit its broad access, so it is scoped and only a warning. Same pattern, real difference in risk. Open one set for the detail, and every finding is explained. This wildcard on all table data is the real problem: it grants write access to every table. The other lines show which objects are affected, their business domain, and why they were flagged. Planning a change? Simulate it first. Remove a permission from a set, and let the analysis show what would happen. Removing read access to items from one small lookup set affects nine permission sets and four users. You see that, and exactly who is affected, before anything is saved. And if a mistake does get through, you can roll back user-defined sets to the previous version. Preview exactly what will be removed, confirm, and it is done. The rollback itself is logged too, so the audit trail stays complete. Advanced Permissions Management for Business Central. Every permission change visible, explainable, and reversible. Start your thirty-day trial today.
Video (about 5 minutes): the tour of Advanced Permissions Management.
Start with the overview. Auditors can go to Compliance evidence.
All apps support Business Central 29 (2026 release wave 2). For the supported versions per release, see supported Business Central versions.
Compliance Essentials, Advanced Permissions Recorder and Inventory Reconciliation get the new version number only.
Follow the steps in the release notes. Partners: see Information for partners.
Last reviewed: October 2026.