Security and Permissions

Permissions

To use this extension, all users need some extra permissions:

(BRIPFU_READ) - Production Follow-Up - Read -Provides read-only access to all information within the Production Follow-Up extension.
(BRIPFU_BASIC) - Production Follow-Up - Basic - Grants access to the Production Follow-Up dashboard and allow users to change machine statuses and interact with the time tracking features. Users with this permission set cannot insert, modify, or delete Time Journal Lines manually or update Machine Status Progress Lines. They cannot edit Production Follow-Up Setup page.
(BRIPFU_ADMIN) - Production Follow-Up - Admin - Grants full administrative access, including the ability to create, modify, or delete Time Journal Lines and update Machine Status Progress Lines.

Data Storage

All Production Follow-Up data is stored inside the customer’s Business Central tenant database (no separate PFU database is used).
The app stores operational execution and monitoring data used by PFU pages and features, such as:
- Dashboard monitoring data for released production orders (progress indicators, produced/consumed quantities, performance metrics like “units produced per hour”, assigned user/location/bin, and component tracking details).
- Machine Status Progress records (status transitions like Setup/Running/Paused/Finished, timestamps, stop reasons, and audit notes).
- Time registration data through PFU Time Journaling / Time Entries (including traceability flags such as “Manually Updated” inherited from Machine Status Progress updates).
- PFU setup parameters (for example, enabling machine status control, controlling output posting by machine status, and posting time entries as capacity ledger entries) are stored as setup records within Business Central.

Privacy Compliance

Production Follow-Up works within the customer’s Business Central environment, supporting real-time manufacturing visibility and control through in-tenant pages and processes (dashboard, machine status tracking, time journaling).
PFU’s data access is governed by Business Central permissions, including dedicated permission sets provided by the extension (for example, a read-only permission set).
Where PFU captures audit and traceability details (for example, stop reasons, timestamps, and audit notes on machine status progress), access and visibility are still constrained by the user’s permissions and role design.

Data Archiving

PFU does not require a separate archiving mechanism to operate; its operational records remain available for monitoring and traceability within the standard Business Central data lifecycle.
Machine Status Progress and Time-related records support operational traceability (including “Manually Updated” flags and transferred audit notes when progress lines move to time posting flows), which can be used for internal audit/history purposes.
Any long-term retention/cleanup strategy should follow the customer’s Business Central governance approach, since PFU relies on standard BC storage and permissions.

Security Best Practices

Use PFU permission sets to assign access by role. At minimum, ensure users have the required PFU permissions (for example, read-only access via the PFU read permission set) and expand permissions only where needed.
Limit Admin-level capabilities to a small group. PFU allows manual updates to Machine Status Progress lines only for users with the Admin permission set, so keep these rights restricted to responsible supervisors/key users.
Control operational posting discipline carefully. If you enable Allow Machine Status Control on Output, output posting is restricted unless machine status is set appropriately (e.g., Running). Use this setting intentionally to balance governance vs. operational urgency.
Standardize setup via Assisted Setup. Use PFU Assisted Setup to create default values (and optional demo stop codes / default time journal batch) and to ensure consistent configuration across environments.
Rely on the dashboard and progress tracking for operational oversight. The PFU dashboard and Machine Status Progress pages provide real-time indicators and audit-ready status history to support monitoring and process improvement.

This app supports the Essential and Premium editions of Dynamics 365 Business Central.

All countries where Microsoft Dynamics 365 Business Central is available.

Dutch, English, French, Portuguese.

Last updated on May 4, 2026