I want to create a user with the minimum permissions.
So I just created new permission set via the "Record permission" function.
It's all good, but it's not enough because I cannot "record" what is happening when users log in.
I started manually adding codeunits one by one but looks there are too many of them.
'Basic' role is too much, it's not good to give everybody read access to the value entries for example.