Set Up Rules per User and Security Group
On the MCP Guard User Settings page you add one line per user or per security group. That line is the rule. It names the companies an AI assistant may use in Microsoft Dynamics 365 Business Central, the company the connection opens in, the MCP configuration, the access levels and the daily limits. A rule for the user always wins over a rule for one of the user's security groups.
Before you start
- You need the permission set MCP GUARD - ADMIN and an MCP Guard licence. See Assign Licences.
- The rules are shared by all companies of the environment. You make them once per environment, not once per company.
Add a rule
- Choose the search icon (Tell Me), enter MCP Guard User Settings, and then choose the related link. You can also open the page from the MCP Guard Administration page. See The MCP Guard Administration Page.
- On a new line, choose User or Security Group in the Applies To field.
- For a user, fill in User Name. The Select User lookup shows the enabled users. For a security group, fill in Security Group Code. The Select Security Group lookup shows the security groups of the environment.
- Fill in the other fields as described in the following table.
| Field | What to enter |
|---|---|
| Priority | For a security group: which group rule wins when a user is a member of several groups with a rule. The lowest number wins. |
| Allowed Companies | The companies the AI assistant may use, separated by semicolons. Leave empty to allow every company the user has permissions in. See Environments and Companies. |
| Default Company | The company the connection opens in. When it is empty or not allowed, the first allowed company is used. |
| MCP Configuration | The name of the MCP server configuration the user gets. Leave empty to use the default configuration of the environment. See MCP Configurations. |
| General Access | What the AI assistant may do in Business Central outside the MCP Guard extension's own API pages. A new rule starts at Read. See General Access. |
| Daily Call Limit | How many calls the AI assistant may make to Business Central for the user in one day, reading included. 0 means no limit. See Daily Limits. |
| Daily Change Limit | How many calls that change, create or post something the AI assistant may make for the user in one day. 0 means no limit. See Daily Limits. |
| Production Access, Planning Access, Assembly Access, Project Access | What the user may do through the MCP Guard extension's own API pages for that module. A new rule starts at Read. See Access Levels per Module. |
| Description | A note for administrators. |
Two columns are shown, not entered:
| Column | Shows |
|---|---|
| Switched Off by User | That the user switched the AI assistant off for themselves in this environment, on the My MCP Guard page. It only has an effect in a sandbox environment. See Switch the AI Assistant On or Off in a Sandbox. |
| User Permission Set | For a user rule: Assigned when a permission set assigned to the user includes MCP GUARD - USER, or Not found when none does. A set that comes through a security group is not checked, so Not found can also mean that. Empty for a security group rule. See Permission Sets. |
Choose a field to read a short description of the field.
Four choices matter most. An empty Allowed Companies field means every company the user has permissions in, not no company. An empty MCP Configuration field means the default configuration of the environment. General Access and the four module levels start at Read, so nobody writes through the AI assistant until a rule says so. And a limit of 0 means no limit.
Which rule applies
Business Central looks for the rule of the signed-in user in this order:
- The line for the user.
- A line for a security group the user is a member of. When several group lines match, the line with the lowest Priority wins.
- No rule.
A user without a rule gets every company they have permissions in, the default MCP configuration of the environment, and Read access for every module.
On a line for a security group, the daily limits hold for each member on their own.
Important
Security group membership comes from Microsoft Entra ID. When Business Central cannot read the membership of a group that has a rule, no group rule is applied to the user. The user then has no rule, and reads only through the extension's API pages.
What happens next
The companies, the default company, the MCP configuration, General Access and the daily limits are applied by the BC MCP Pro connector, the next time it reads the rule. The connector reads the rule when it starts. The module access levels are checked by Business Central on every create, change, delete and action. See Connect with the BC MCP Pro Connector and Access Levels per Module.