Zentriq Agent is live on Microsoft AppSourceInstall it free →Microsoft AppSourceInstall it free →

"You do not have the following permissions on TableData Sales Header: Insert."

Missing table permission when saving a document

Business Central is telling you that your account may read the named table but may not create rows in it, so the record is refused before it is saved. This is a rights problem, not a data problem. An administrator has to assign a permission set that includes Insert on that table, for the company you are working in.

Why Business Central raises this error

Every table access in Business Central is checked against the sum of the permission sets assigned to the user. Each permission set grants Read, Insert, Modify and Delete separately per table object, and each assignment can be limited to a single company. When the running code tries to create a record and none of the assigned sets grants Insert on that table in that company, the platform stops the operation and names the table and the missing permission type. The same check applies to background sessions, API calls and extension code, which run under an account of their own.

  • The user only has read-oriented or role centre permission sets that grant Read on the table but never Insert.
  • The permission set is assigned with a value in the Company field, so it applies in one company and gives nothing in the company where the error appears.
  • The action runs in a background job, an API call or an extension context under an account that lacks the extension permission set or the D365 EXTENSION MGT set.

How to fix it

  1. Note the table name and the permission type in the message: they tell you exactly what has to be granted.
  2. Search for Users (Alt+Q), open the affected user and look at the User Permission Sets part, including the Company column on each line.
  3. Open Effective Permissions from the user, filter on the table named in the message and read the Insert column to confirm what the user really has today.
  4. Ask an administrator to add a permission set that covers that document type on a new line, and to leave the Company field empty if the right should apply in every company.
  5. If the error comes from a background job, an API call or an extension, check the account that runs it and give it the extension permission set as well.
  6. Have the user sign out and sign in again, then retry: permissions are read once per session.

How to avoid it in the future

Define one permission set combination per role and assign that combination, rather than adding single sets when someone reports a block. Check a new role with Effective Permissions in a sandbox before rolling it out, and review assignments after every extension install or upgrade, because new tables ship with new permission sets. Keep in mind that a licence limit is not a permission problem: a Team Member licence restricts which documents may be created at all, and no permission set overrides that.

Frequently asked questions

Can I grant this permission to myself?

No. Assigning permission sets requires an administrator, normally someone with the SUPER permission set. A standard user can look at Effective Permissions but cannot change the assignment.

The permission set was added and the error is still there. Why?

Usually one of three reasons: the session still holds the old permissions and needs a fresh sign-in, the assignment is limited to another company, or the user's licence does not entitle them to create that record type.

Related reading

Other Business Central errors