For the SwissSalary connector to read and write your payroll data, the Illizeo application must be registered in your Business Central environment and given five permission sets, and only these. This article is for the Business Central administrator who registers it and for the Illizeo administrator who then tests the connection.
Before you start #
- You are an administrator of the Business Central environment that runs SwissSalary.
- SwissSalary 365 and the SwissSalary Cloud Essentials app are installed in that environment.
- You have the Illizeo application ID: it is shown on the SwissSalary card, in App Store › External Connectors.
Registering the Illizeo application in Business Central #
- In the Business Central environment itself, open the Microsoft Entra Applications page. The “Microsoft Entra Apps” menu of the admin centre is not needed: it would grant environment management.
- Create a card with the Illizeo application ID.
- Set its state to Enabled.
- In the card’s list of permission sets, add the five sets from the table below. Leave the company blank to cover every company that receives transmissions, or add one line per company.
The five permission sets #
| Set | Name in Business Central | What it is for |
|---|---|---|
D365 BASIC |
Dynamics 365 Basic access | Basic access to Business Central. |
SWS READ |
Read Employee Data | Reading employee records, codes and payroll results. |
SWS CE CC AUTOMATE |
Cross-Company Automate | Together with D365 BASIC, opening the SwissSalary API. |
SWS PROCESS |
Employee Edit and Run Payroll | Writing employee records and salary lines. |
SWS BUDGET READ |
Read Budget Data | Validating an employee record’s allocation group. |
What not to assign #
- SUPER: Microsoft does not allow it for an application, and Illizeo does not need it.
- D365 AUTOMATION: it opens the Business Central automation APIs (users, extensions). The connector does not use it.
- Any set broader than those in the table: the connector only uses the resources they open.
Testing the connection from Illizeo #
- Open App Store › External Connectors, then the SwissSalary card.
- Enter your organisation’s Microsoft Entra tenant ID and the name of the Business Central environment.
- Click Test connection, choose the company from the list, then click Save connection.
If a set is missing, the test fails and states that the application’s permission sets do not open the SwissSalary API. Add the missing set on the application’s card in Business Central, then run the test again.
Good to know #
- SWS PROCESS also allows running payroll. Illizeo calls no payroll action: no calculation, no posting, no payment. Calculation, payslips and payments stay in SwissSalary.
- The connection test checks reading. Write permissions (SWS PROCESS, SWS BUDGET READ) cannot be checked without writing: a refusal is reported at the first transmission.
- Choose the environment carefully. Illizeo suggests no default environment: once the connection is saved, transmissions write to the chosen environment for real.
