Permissions & roles
TaxRateCentral has two role-based permission sets. They map to the people who work with sales tax. Assign them through Users → Permission Sets, or through user groups or Entra security groups. The procedure is the same as for any Business Central permission set.
The two roles
| Permission set (caption) | Object name | Intended user | Grants |
|---|---|---|---|
| TaxRateCentral Admin | TigTX TigTax Admin |
System administrator / implementer | Full scope: edit the TaxRateCentral Setup Card, maintain states and state tax groups, load states, post codes, and rates, and run the Sales Taxes Collected report. Read, insert, modify, and delete access to the TaxRateCentral tables. Access to the standard tax tables that rate processing writes to. |
| TaxRateCentral User | TigTX TigTax User |
Users who enter customers and sales and service documents | Reads the setup and the state tax groups, so that the app can assign tax area codes when users change customers and documents. Maintains states and customer tax exempt certificates. Runs the Sales Taxes Collected report. |
What each set allows
| Data | TaxRateCentral User | TaxRateCentral Admin |
|---|---|---|
| TaxRateCentral setup | Read | Read, insert, modify, delete |
| State tax groups | Read | Read, insert, modify, delete |
| States | Read, insert, modify, delete | Read, insert, modify, delete |
| Customer tax exempt certificates | Read, insert, modify, delete | Read, insert, modify, delete |
| Tax areas | — | Read, insert, modify |
| Tax area lines | — | Read, insert, modify, delete |
| Tax jurisdictions, tax details, and tax groups | — | Read, insert, modify |
| Post codes | — | Read, insert |
Both sets give execute access to the same pages, codeunits, and reports. Only the data access is different.
The TaxRateCentral Admin set gives the access to the standard tax tables that rate processing needs. You do not need to assign D365 SETUP for rate processing.
Standard sets to assign with TaxRateCentral
- Assign D365 BASIC with each TaxRateCentral set. It gives read access to tax areas and post codes, and access to job queue entries.
- Users who enter customers and documents also need their standard sales sets. Examples are D365 CUSTOMER, EDIT and D365 SALES DOC, EDIT.
Admin work
These tasks need the TaxRateCentral Admin set:
- The Process and Process All actions on the States page.
- The Load Zip Codes action on the Post Codes page.
- The scheduled rate update in the job queue.
A user with only the TaxRateCentral User set gets a permission error on these actions.
To delete a tax group that has state tax groups, a user also needs the TaxRateCentral Admin set. Without it, the app shows a message and does not delete the tax group. The TaxRateCentral sets do not give delete permission on the Tax Group table, so a standard set must also give it. See Tax groups.
The job queue runs as the user who sets the job queue entry to Ready. Give that user the TaxRateCentral Admin set. See Job queue.
In a demo company, the TaxRateCentral Setup Card offers to load the demo data. Only a user who can change the TaxRateCentral setup sees this question. Give the TaxRateCentral Admin set to the user who loads the demo data. See Demo data.
Composition (for administrators)
A non-assignable building block holds the object list. The two role sets include it:
| Building block | Object name | Contents |
|---|---|---|
| TaxRateCentral Objects | TigTX TigTax Objects |
Execute access to the tables, pages, reports, and codeunits of the app |
You cannot assign TaxRateCentral Objects. Assign only the two role sets. Each role set includes TaxRateCentral Objects, and adds its own data access.
Suggested assignments
- Implementer / BC admin → TaxRateCentral Admin during the rollout. Narrow the access when the rollout is complete.
- Tax accountant who maintains the setup and runs the rate updates → TaxRateCentral Admin.
- Sales and service order entry, customer maintenance → TaxRateCentral User.
The app assigns tax area codes when users change customers and documents. Give the TaxRateCentral User set to each user who does this work, so that the app can read the setup.
A user who holds TaxRateCentral Admin does not also need TaxRateCentral User. The Admin set is a superset of the User set.