Enabling Your Application in Business Central
Article Status Update: This article has been recently updated and is currently under review. Please check back later.
This is the second of two setup articles. It assumes you have already completed Registering Your Application in Microsoft Entra ID and can obtain an access token.
Getting a token is only half the job. Microsoft Entra ID decides whether your application is allowed to ask for a token. Business Central keeps its own, entirely separate list of applications it trusts, and decides what each one may actually see. Until your application is on that list, every request fails.
Note: These steps happen inside the garage's Business Central, not in the Azure portal. You need permission to administer the environment.
Create Microsoft Entra Application
Open the Business Central environment you want to connect to.
Select the search icon, or press Alt+Q , and type Microsoft Entra Applications.
Choose Microsoft Entra Applications under Go to Pages and Tasks .
Select New. The Microsoft Entra Application Card opens.
In Client ID, enter the Application (client) ID from the previous article.
In Description, enter a space-free name that identifies the integration, such as gh-api-demo or MyGarageAPIs. Business Central automatically uses this description as the username, converting it to uppercase.
State defaults to Disabled. The application exists but can do nothing.
Change State to Enabled. Business Central prompts 'A user named [your description] will be created. Do you want to continue?'
Choose Yes.
What just happened, and why it matters. Enabling the application creates a Business Central user to represent it. This is the key idea behind the whole design. Your application is not granted permissions directly. It is given a user account, and permissions are granted to that user exactly as they would be to a person.
Once you say yes, the User ID, User Name and User Telemetry ID fields fill in. The user name is the description in capitals.
To change the Client ID or Description later, set State back to Disabled first. The permission sets below can still be edited while it is enabled.
Assign permission sets
Scroll down to the User Permission Sets section. This is where you decide what the application can actually touch.
Select New Line.
In Permission Set , choose the set or sets the integration needs. See Garage Hive API Permission Sets to work out which apply. Where an integration covers more than one area, assign several narrow sets rather than one broad one.
Leave Company empty to apply the permission set to every company, or choose a single company to restrict it.
The line shows the Extension Name the permission set comes from, for example Garage Hive, and its Permission Scope, for example System.
Give the application only what it needs. We strongly recommend assigning only the permission sets the application actually requires, and nothing more. An application that reads customer records should not also be able to reach jobsheets, employees or financial data. Broad access is convenient, and it means any mistake or compromise in that application reaches your whole system rather than one corner of it.
Garage Hive API Permission Sets lists each Garage Hive permission set, what it covers, and combinations known to work.
An application cannot be assigned the SUPER permission set. Business Central prevents this deliberately.
About the Grant Consent action. The card has a Grant Consent action. If you already granted admin consent in the Azure portal, as described in the previous article, you do not need it and should leave it alone. It is the alternative to consenting in the portal, not an additional step. It also only works if a redirect URI was configured on the application registration.
Need Help?
If you have questions about connecting to the Garage Hive APIs or need assistance with your integration, contact Garage Hive support .
See Also
English (UK, IE, IM and IZ). To find documentation in other regions where Garage Hive operates, click here.
English (UK, IE, IM and IZ). To find documentation in other regions where Garage Hive operates, click here.