Web Integration User and Permissions

Set up web integration users and required permission sets.

Website User

The website has to be assigned a full user licence in Business Central. You may need to involve your IT Admin. Refer to standard documentation: Create Users

From Business Central May 2022 external integration can only be done using OAuth. For a website integration, this must be of a Service to Service Authentication type as documented below. Note that this is a technical document.

Using S2S Authentication

To create the necessary Azure resources will usually require setup from your IT administrators in liaison with TVT.

Deprecated from May 2022 - Web Service Access Key

The website user needs to have a ‘Web Service Access Key’ created so they can authenticate to the web services. This is tenant wide, so is shared across all companies.

• Log into Business Central as the website user. Other users cannot see the web service access key.
• Navigate to the User record for the website user
• Select ‘Change Web Service Key’ on the ribbon
• Depending on your security policies select whether you want the key to expire or not. Click OK.
• The ‘Web Service Access Key’ will be displayed. Pass this on securely to your web partners.

  1. Make sure you double click on the field to select all the text!

TVT will also need a copy of this key so we can test as the website user to ensure the functionality is working.

Permissions

The website integration user will need to be assigned appropriate Permissions to be able to:

• Authenticate to Business Central (i.e. log in)
• Access the Web Services (read, insert, modify, delete as appropriate)
• Access the tables underlying the Web Services (e.g. Items)

Assign Permissions to Users & Groups

Depending on your particular setup, the scope of permissions will need to be customised.

Whilst for initial testing you can give the Website User broad permissions, you should limit the scope of their access appropriately, and this must be done during the testing phase so any issues are ironed out.

Licensing

Note that you must be in compliance with Business Central licensing terms. If internal users are entering orders through the website, they must be licensed as a Business Central user. Refer to the Microsoft licensing terms.