Configure Permission Sets for Quality Inspector

Quality Inspector uses Business Central permission sets to control access to Quality Inspector objects and data. Users must also have the standard Business Central permissions required for the transactions they perform, such as receiving purchase orders, posting warehouse receipts, or recording production output.

Quality Inspector’s Quality Inspectors and Quality Inspection Permissions page provides additional functional restrictions within Quality Inspector. These settings supplement Business Central permission sets; they do not replace them. More information on the functional permissions can be found here : Quality Inspectors and Quality Inspectors Permissions Page.

Quality Inspector Permission Sets

Quality Inspector provides the following primary permission sets:

Permission Set	Purpose
IWXQIGENERAL (“Quality Inspector – Supervisor” )	Quality Inspector Supervisor access. Provides full access to Quality Inspector configuration, tests, templates, generation rules, reports, analysis, integrations, and other Quality Inspector functionality.
IWXQIEntryInspector (“Quality Inspector – Data Entry”)	Quality Inspector Data Entry access. Intended for inspectors and operational users who need to create or update inspection tests and enter inspection results, without providing the same configuration access as a supervisor.
IWX QI ReadOnly (“Quality Inspector – Read Only”)	Read-only Quality Inspector access. Intended for users who need to review inspection tests and configuration without changing them.

These permission sets are not exclusive. Users also require the common Insight Works and Business Central permission sets appropriate to their role.

Quality Inspector Administrator or Configuration User

Users, supervisors, design teams, consultants, or analysts who configure Quality Inspector should normally have:

• IWXQIGENERAL
• IWX GS USER
• IWORKS COMMON
• IWX REG REGISTRATION
• GRAPHICAL SCHEDULER
• IWX RB USER
• LOCAL
• LOGIN
• D365 BUS PREMIUM

This provides the broad Business Central, Quality Inspector, Graphical Scheduler, Rule Builder, and Insight Works access normally required to configure the application.

IWORKS COMMON is required for Insight Works applications, and IWX REG REGISTRATION provides access to the Insight Works application registration services, IWX RB User is used for Rule Builder access, which is used for expression evaluation.

D365 BUS PREMIUM provides full Premium Business Central functionality, including manufacturing functionality.

The Graphical Scheduler permission sets are required when configuring or using Quality Inspector functionality that schedules or assigns inspections through Graphical Scheduler.

Quality Inspector / Data Entry User

For a user whose primary responsibility is entering and completing Quality Inspection Tests, use:

• IWXQIEntryInspector
• IWORKS COMMON
• IWX REG REGISTRATION
• IWX RB User
• LOCAL
• LOGIN
• Business Central permission sets required to access the records involved in the inspection

For example, an inspector who only reviews and records measurements against existing tests generally does not require IWXQIGENERAL.

If the inspector uses Graphical Scheduler assignment functionality, also provide the applicable Graphical Scheduler user permissions.

Quality Inspector Read-Only User

For users who only need to review Quality Inspector records:

• IWX QI ReadOnly
• IWORKS COMMON
• IWX REG REGISTRATION
• IWX RB User or IWX RB Read Only
• LOCAL
• LOGIN
• Any Business Central read permissions required for the related source records

Use this role for users who need visibility into inspection results but should not enter or change results.

Production Users That Automatically Create Inspections

A production employee does not necessarily need supervisor-level Quality Inspector access just because recording output automatically creates an inspection.

For a production user who records output and triggers a Quality Inspector generation rule, typically assign:

• IWXQIEntryInspector
• IWORKS COMMON
• IWX RB User
• IWX REG REGISTRATION
• LOCAL
• LOGIN
• Appropriate Business Central manufacturing permissions

For standard Business Central manufacturing, D365PREM MFG, EDIT is Microsoft’s assignable permission set for creating and working with manufacturing data.

A broader alternative is D365 BUS PREMIUM, which includes D365PREM MFG, EDIT.

The important point is that the user needs permission to perform the production transaction itself in addition to the Quality Inspector permissions required by the automatic test-generation process.

For information about automatically creating inspections from production output, see the Quality Inspector documentation for automatic production testing.

Receiving Users That Automatically Create Inspections

Receiving works the same way. The employee posting the receipt must have:

• IWXQIEntryInspector
• IWX RB User
• IWORKS COMMON
• IWX REG REGISTRATION
• LOCAL
• LOGIN
• The standard Business Central permissions required for the receiving method being used

Receiving directly from a Purchase Order

If the user receives and posts from the Purchase Order, the Business Central permissions must allow purchase-document posting.

Microsoft’s D365 PURCH DOC, POST permission set provides permission to post purchase documents and includes the corresponding edit permissions.

Receiving through Warehouse Receipts

If the location uses Warehouse Receipts, the user must instead have the Business Central warehouse permissions required to create and post those warehouse documents.

Microsoft documents separate permissions for creating warehouse documents and posting warehouse documents, reflecting the additional permissions required by warehouse-enabled receiving.

Quality Inspector supports automatic inspection creation when a warehouse receipt is posted.

The exact Business Central permission sets should therefore match the customer’s warehouse configuration and receiving responsibilities.

Recommended Role Summary

Role	Quality Inspector Permission	Additional Permissions
Quality Inspector Administrator / Configuration	IWXQIGENERAL	IWX GS USER, GRAPHICAL SCHEDULER, IWORKS COMMON, IWX REG REGISTRATION, LOCAL, LOGIN, D365 BUS PREMIUM
Quality Supervisor	IWXQIGENERAL	IWORKS COMMON, IWX REG REGISTRATION, LOCAL, LOGIN, plus permissions for the Business Central processes they use
Quality Inspector / Data Entry	IWXQIEntryInspector	IWORKS COMMON, IWX REG REGISTRATION, LOCAL, LOGIN, plus source-document permissions as required
Quality Read Only	IWX QI ReadOnly	IWORKS COMMON, IWX REG REGISTRATION, LOCAL, LOGIN
Production Operator creating tests automatically	IWXQIEntryInspector	IWORKS COMMON, IWX REG REGISTRATION, LOCAL, LOGIN, plus manufacturing permissions such as D365PREM MFG, EDIT
Purchase Receiving Operator creating tests automatically	IWXQIEntryInspector	IWORKS COMMON, IWX REG REGISTRATION, LOCAL, LOGIN, plus purchase posting permissions such as D365 PURCH DOC, POST
Warehouse Receiving Operator creating tests automatically	IWXQIEntryInspector	IWORKS COMMON, IWX REG REGISTRATION, LOCAL, LOGIN, plus the warehouse permissions required to create and post warehouse receipts

Quality Inspector Functional Permissions

Business Central permission sets determine whether a user can access Quality Inspector objects and data. Quality Inspector also provides the Quality Inspectors and Quality Inspection Permissions configuration for restricting specific Quality Inspector activities.

Use these functional permissions when, for example, an inspector should be allowed to enter results but should not be allowed to delete or otherwise manage finished inspections.

These restrictions are applied in addition to the Business Central permission sets described above.

For more information, see:

• Quality Inspector Setup
• Quality Inspectors and Quality Inspectors Permissions Page
• Configure User Permissions for Insight Works Applications
• Configure Special Permissions in Shop Floor Insight (When configuring Quality Inspector for use with Shop Floor Insight)
• Microsoft: Assign Permissions to Users and Groups