Most Business Central security problems aren’t about misuse—they’re about access that should never have been granted. This post explains how Finance must design permission sets, enforce segregation of duties, and own the quarterly access review—not IT.