To find out which table access is missing - event create rule permission in d365fo

 class EventSecurity, method isFilterAccessible.

To find out which table access is missing you can change this method in a TEST environment to:

public boolean isFilterAccessible(Query   query)
{
    QueryBuildDataSource    qbds;
    Counter                 i;

    for (i=1;i<=query.dataSourceCount();i++)
    {
        qbds=query.dataSourceNo(i);
        if (! this.isTableAccessible(qbds.table()))
        {
            info(tableId2name(qbds.table()));
            //return false;
        }
    }

    return true;
}