---
title: "Connectivity studio security roles"
slug: "connectivity-studio-security-roles"
tags: ["Concept topic"]
updated: 2026-03-20T09:38:47Z
published: 2026-03-20T17:44:08Z
canonical: "docs.staedean.com/connectivity-studio-security-roles"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.staedean.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Connectivity studio security roles

On installation, Connectivity Studio adds a set of business-integration-specific security roles to the set of roles as provided in D365 F&SCM. You can assign the users, who play a role in business integrations, to the **Connectivity studio security roles**.

### Security roles

You can use these **Connectivity studio security roles** in your business integration team:

| Roles | AOT name | Purpose | Description |
| --- | --- | --- | --- |
| Connectivity studio Message designer | BisMessageDesigner | Design interfaces | The designer of the business integration, including messages, documents, connectors, and web services. The designer has read, update, create, and delete access to the full Connectivity Studio. |
| Connectivity studio Message manager | BisMessageManager | Monitor interfaces | The manager monitors the message process. The manager has these access rights: - Read access to the full Connectivity Studio. - Update, create, and delete access to the **Connectivity studio history**. - Run integrations. |
| Connectivity studio Message user | BisMessageUser | View only | The user can use the message process. The user has these access rights: - Read access to the full Connectivity Studio - Run messages and web service actions. |
| Connectivity studio Message run | BisMessageRun | Run message from a menu item | A user with this role can run a message or a web service action from an action menu item. |

For detailed information on the roles, refer to the Security configuration in D365 F&SCM.

### Limit shown data to current company

You can limit the view of the following Connectivity Studio pages to only show data for the current company:

- **History management (BisConHistory)**
- **Data synchronization log (BisRecordEventLog)**
- **Outbound message queue (BisMessagetableEventLog)**

To do so, on the **Security configuration** page:

1. For the desired Connectivity Studio security role, in the **Security policy context string** field, enter: RestrictBisPerLegalEntity.
2. On the **Unpublished objects** tab, publish the changed security role.

## Related

- [Set Connectivity studio parameters](/set-connectivity-studio-parameters.md)