Personalized Community is here!
Quickly customize your community to find the content you seek.
Have questions on moving to the cloud? Visit the Dynamics 365 Migration Community today! Microsoft’s extensive network of Dynamics AX and Dynamics CRM experts can help.
2021 Release Wave 2Discover the latest updates and new features releasing from October 2021 through March 2022.
2021 release wave 2 plan
The FastTrack program is designed to help you accelerate your Dynamics 365 deployment with confidence.
FastTrack Community | FastTrack Program | Finance and Operations TechTalks | Customer Engagement TechTalks | Upcoming TechTalks | All TechTalks
Which privilege is needed to change logon name, I'm a System Administrator and I can do this, but I would like to give such privilege to other user (which is not System Administrator) which is able to create new User accounts.Error which I get is: "Unable to change domain logon nameYou do not have the necessary permissions to change the domain logon name for this user."Unhandled Exception: System.ServiceModel.FaultException`1[[Microsoft.Xrm.Sdk.OrganizationServiceFault, Microsoft.Xrm.Sdk, Version=188.8.131.52, Culture=neutral, PublicKeyToken=31bf3856ad364e35]]: Access is denied.Detail: <OrganizationServiceFault xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.microsoft.com/xrm/2011/Contracts"> <ErrorCode>-2147187707</ErrorCode> <ErrorDetails xmlns:d2p1="http://schemas.datacontract.org/2004/07/System.Collections.Generic" /> <Message>Access is denied.</Message> <Timestamp>2012-02-17T08:26:40.8935564Z</Timestamp> <InnerFault i:nil="true" /> <TraceText i:nil="true" /></OrganizationServiceFault>
I think you may actually need the System Administrator role in order to make changes to the logon name.
System Administrator in CRM can do these cahages.
Syetem Admin security role in CRM can do these chages.
You can open the System Administrator role and Copy that Role to something else that can be then escaled down on the other entities to allow that user to perform this task without having the chance to for example delete Accounts.
I was trying to do what suggested Gus, but unfortunately after copying role of "System Administrator" to "Sys Admin Copy" user with "Sys Admin Copy" is not allowed to change logon name. So this means that user with System Administrator is only allowed to do this thing.
I was hoping to do the same thing but I too copied the Sys Admin security role to Sys Admin 2, and any user that I give the original Sys Admin permission to can change it, but if I give the same user the identical Sys Admin2 role I get the same error stated above. Was a solution found?
I haven't found a solution for this. I've read somewhere that not all privileges are listed in forms in CRM (using browser), few of them are hidden and can be found in database, but I think even if I find it, this change is not supported.
Business Applications communities