If you can implement the logic as a microservice and no data transactions are needed then probably a data mesh can be used. Possible are many things, but even if you can, it doesn’t mean you should do it, and this is one of the most difficult things to learn. When you gain something, you lose something and what you lose can be found eventually much later, when is maybe too late.
Looking at the configurable permissions of an ERP system like Dynamics 365 I’d say that making the permissions work for such an infrastructure will become a nightmare, no matter how good the design is. Besides predictability and security you need to consider performance, reliability and all the other standard requirements for an application that need to be considered,