web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Microsoft Dynamics CRM (Archived) / Analyse Security model
Microsoft Dynamics CRM (Archived)

Analyse Security model

(0) ShareShare
ReportReport
Posted on by Jay2014

Hi CRM Family,

I need to analyse the security model and recommend improvements on the current set up but I am not sure on what to look for. So far i can say

- Currently there are lot of Sys Admins which would need to be cut down.

- Currently there is one team and one business unit (35) users

Any ideas of improvements and what to look out for would be appreciated

Many Thanks,

*This post is locked for comments

I have the same question (0)
  • Suggested answer
    ashlega Profile Picture
    ashlega 34,477 on at

    Hi,

     there is no good or bad security model without business requirements. Start with the requirements, and see how that security in CRM fits the requirements. From there, you can recommend the improvements.

     For example, ask the stakeholders about the following:

    - Does everyone need to be an admin? Why yes or why no?

    - Do they all need access to all records? Why yes or why no?

    - Are there security exceptions? (some users are not supposed to see specific records.. like a conflict of interest, for instance.. or, vice versa, they are not supposed to see anything in general, but they need to see some)

    - What about the super users? (managers, team leads, directors, etc)

  • Verified answer
    prt33k Profile Picture
    prt33k 6,907 on at

    Hi Jay,

    1. The best practice is not to have sys admin role allocated to business user.

    2. If the organization model support just one BU, then you can work with root BU. However do consider that org expand the business and can onboard various dept on CRM. In those cases it is advised to work at child BU and not root BU.

    3. The one team you have will be the OOB team which get created when you create BU. If you are not using team ownership(as appear in your case) then no more team creation is required.

    Coming to how to proceed in you current system:

    1. Create a new security role with minimal set of privileges - basically read, append and appendto on all used entity across the  organization. You can call this as base role.

    Usually we copy the privileges from Salesperson security role into a new role(base role) and then configure the new role to minimal set.

    2. Based on you organization demand and users profile - create additive role - where you only give additional privleges. e.g. suppose the base role has read priv on contact and no write privelege. If  few user need write/create priv also then create a new role for them and give create/write priv on contact entity - dont give read on this new role as read already exist in base role.

    3. All user should be given base role - the minimal set of priv. Additonal role is given based on user access rights.

    Do let me know if you have any other specific question.

    Thanks,

    Prateek

  • Jay2014 Profile Picture
    Jay2014 on at

    Thank you both. Good answers .. Are there any factors that can lead to performance issues, i assume

    1. If a user has to many security roles, CRM may take some time to load leading to longer load times. Assuming CRM checks the user's profile and roles upon load ?

    2. Any other ?

    Many Thanks,

  • Verified answer
    ashlega Profile Picture
    ashlega 34,477 on at

    For the performance considerations, have a look at this article from MS:

    www.microsoft.com/.../details.aspx

    It's a long one, but it covers most of those "what if" questions

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Congratulations to the November Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
SA-08121319-0 Profile Picture

SA-08121319-0 4

#1
Calum MacFarlane Profile Picture

Calum MacFarlane 4

#3
Alex Fun Wei Jie Profile Picture

Alex Fun Wei Jie 2

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans