Security overview (roles/privileges)

(0) Share

Report

Posted on by Jeroen J

Hi,
(mostly) to comply with our GDPR, my organization has requested easy insight in what team has access to what entity (8.2 on premise).

Well, the step from team to role is an easy one and can be performed on the team form. But from role to privilige, which is the missing link, seems to be not there out of the box. Any workaround to get the detailed privileges into a view (or how to show a sql query on a form)?

Thanks in advance for thinking along with me.
Best regards,
Jeroen

I have the same question (0)

All responses (3)

Answers (2)

Sort by

Verified answer

a33ik 84,331 Most Valuable Professional on at

Like (1)

Report
Copy link

Link copied!

Hello Jeroen,

You can use following FetchXml to collect privileges associated with the particular role:

<fetch>

<entity name="role" >

<link-entity name="roleprivileges" from="roleid" to="roleid" intersect="true" >

<link-entity name="privilege" from="privilegeid" to="privilegeid" >

<attribute name="canbebasic" />

<attribute name="canbedeep" />

<attribute name="accessright" />

<attribute name="canbeentityreference" />

<attribute name="canbelocal" />

<attribute name="canbeglobal" />

<attribute name="name" />

</link-entity>

</link-entity>

</entity>

</fetch>

And obviously you can change it to SQL if you need.

Was this reply helpful? Yes No
Verified answer

cloflyMao 25,210 on at

Like (0)

Report
Copy link

Link copied!
Hi Jeroen,

There would be no OOB way to create a view which is based on privilige entity.

So you could

1. Build a SSRS report with fetchXml to see priviliges of a specific role, as Andrew suggested.

2. Embbed a HTML web resource, retrieving all priviliges of a specific role by web api function:

https://docs.microsoft.com/en-us/previous-versions/dynamicscrm-2016/developers-guide/mt607997(v=crm.8)

This method means we create a view which is based on privilige manually by ourselve.

You could take mine as reference, it'll retrieve top 10 priviliges of System administrator.(That's because there are about thousands records, I just tested and you could do pagination with other js plugin)

Page

Demo result:

Regards,

Clofly

Was this reply helpful? Yes No
Jeroen J 12 on at

Like (0)

Report
Copy link

Link copied!

Andrew, Clofly,

Thanks for the inspiration! You guys got me into the right direction completing this quest!

Was this reply helpful? Yes No