Many customers struggle to effectively lock down their users in Business Central, this has long been a problem often leaving customer systems more exposed than they were aware or creating a lot of work to fix permission errors arising from attempts to lock things down. There are new tools and new approaches that do allow us to work with a customer to give them a flexible solution that requires little or no maintenance afterwards. Our approach is training combined with consultancy, working with the customer so they still 'own' their security solution. We combine the new features in BC permission sets with considered use of Profiles to give a scalable solution in around half a day. We have developed some techniques and resources that assist with this that we will share in the session.