Access Team and share privileges

(0) Share

Report

Posted on by Community Member

Hi everyone,

We have the following scenario:
Dynamics 365 Online, 8.1

An entity ENTITY1 has an Access Team enabled, USER1 who is the owner of the TEST_ENTITY record, logs on and adds USER2 to the Access Team grid.
Now USER2 logs on and opens the record and tries to add USER3 to to the same Access Team grid, the following message is displayed:

You do not have enough privileges to access the
Microsoft Dynamics CRM object or perform the requested operation. For more information, contact your Microsoft Dynamics CRM administrator.

USER2 and USER3 permissions for ENTITY1:
Create: None
Read: Organization
Write: User
Delete: None
Append: User
Append To: User
Assign: None
Share: Organization

Access Team Template properties:
Delete: not checked
Append: checked
Append To: checked
Assign: not checked
Share: checked
Read: checked
Write: checked

Thanks in advance!

*This post is locked for comments

I have the same question (0)

All responses (7)

Answers (3)

Verified answer

ScottDurow 21 on at

Like (0)

Report

Hi - this is probably because you have set user level permissions on the role which means that they can only add team members if they own the record or are in team that owns the record.

Hope this helps

Was this reply helpful? Yes No
Verified answer

gdas 50,091 Moderator on at

Like (0)

Report

Hi ,

I am assuming that in the team template you are providing Write access with sharing the Organization level , but in the entity privileges you have user level . So try to change instead of user level (Write: User,Append: User,Append To: User ) make then organization level.

Hope this helps.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Hello Illa,

Can you confirm when USER2 opens the record it is not read-only?

Cheers!

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

When USER2 opens the record it is not read only. They only get the message when they try to add team members

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Thank you for your reply, however we cannot grant everyone write rights on organization level, because it will negate the purpose for the access team (assuming everyone will have write access to all TEST_ENTITY).. Is that correct?

Was this reply helpful? Yes No
Verified answer

Community Member on at

Like (0)

Report

Hello Ilia,

I believe, based on the security roles you have set, it should work.

Are you familiar with Fiddler or browsers Developer tools?

If so, since you are using Dynamics 365 Online and does not have access to server traces, take a fiddler or network trace on developer tools, and on the response you might be able to see the error message, something like this:

_error":{"Code":"0x80048306","Description":"SecLib::AccessCheckEx failed. Returned hr = -2147187962, ObjectID: 1dc77158-8374-e711-8100-000d3ab024cd, OwnerId: a1eb5fcc-7e74-e711-8100-000d3ab024cd, OwnerIdType: 8 and CallingUser: dd261e4a-8374-e711-8100-000d3ab024cd. ObjectTypeCode: 1, objectBusinessUnitId: 2c3d3ab7-7e74-e711-8100-000d3ab024cd, AccessRights: 262175 ","DisplayText":"You do not have enough privileges to access the Microsoft Dynamics 365 object or perform the requested operation. For more information, contact your Microsoft Dynamics 365 administrator.

Cheers!

Pedro Pisco

Was this reply helpful? Yes No
Community Member on at

Like (1)

Report

Thanks everyone it is resolved now - we escalated Append access to Organization, that does not give them privileges to append to Read-Only records unless they have write access which is perfect for us.

Was this reply helpful? Yes No