User does not have the privilege to act on behalf another user

(0) Share

Report

Posted on by Community Member

hello,

when I assign a task to another user I get an error, the process stucks on this system job "SendEmailWhenTaskAssigned"

and here is the details of the error :

"Workflow paused due to error: Unhandled Exception: Microsoft.Crm.CrmException: User does not have the privilege to act on behalf another user.

at Microsoft.Crm.BusinessEntities.SecurityLibrary.VerifyUser(Guid user, ExecutionContext context)
at Microsoft.Crm.BusinessEntities.ExecutionContext.SetCaller(Guid callerId, Boolean setCallerLanguage, Boolean verifyUser)
at Microsoft.Crm.BusinessEntities.ExecutionContext.OnBeginRequest(Guid userId, Boolean startTransaction, IsolationLevel isolationLevel, ExecutionOperationContext operationContext, CallerOriginToken originToken)
at Microsoft.Crm.Workflow.WorkflowTransactionContext.OnBeginRequest()
at Microsoft.Crm.Workflow.Services.ActivityServiceBase.ExecuteInTransactedContext(ActivityDelegate activityDelegate)
at Microsoft.Crm.Workflow.Services.SendEmailActivityService.ExecuteInternal(ActivityContext executionContext, SendEmail sendEmail)
at Microsoft.Crm.Workflow.Services.SendEmailActivityService.Execute(ActivityContext executionContext, SendEmail sendEmail)
at System.Activities.CodeActivity.InternalExecute(ActivityInstance instance, ActivityExecutor executor, BookmarkManager bookmarkManager)
at System.Activities.Runtime.ActivityExecutor.ExecuteActivityWorkItem.ExecuteBody(ActivityExecutor executor, BookmarkManager bookmarkManager, Location resultLocation) ".

I am admin on crm and " act on behlaf of onther user " option is enabled.

Thank You

*This post is locked for comments

I have the same question (0)

All responses (10)

Answers (0)

Suggested answer

ManoVerse 760 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!

Error comes when a user does not allow the other user to send email on his behalf , so you need to allow with user you want to send email

File ->option -> Email -> check the below option -> click ok

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report
Copy link

Link copied!

It's already checked and it's not working

Was this reply helpful? Yes No
Royal King 27,686 on at

Like (0)

Report
Copy link

Link copied!

Does user Role has Act on behalf privilege ?

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report
Copy link

Link copied!

yes he has it.

Was this reply helpful? Yes No
Royal King 27,686 on at

Like (0)

Report
Copy link

Link copied!

Does workflow runs on logged in user or some service account? If workflow runs under common user account may be that account missing "Act on behalf" privilege.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report
Copy link

Link copied!

i checked CRM Asynchronous Processing Service, it runs under logged in user ( admin user) who has " act on behalf" and member of PrivUserGroup.

Mohamad

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report
Copy link

Link copied!

Check to see if the user is assign to any Teams and Security Roles.

Make sure that user only has one Security Role and one Team.

Otherwise CRM sometime get confused in which Security Roles or team to use.

-damon

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report
Copy link

Link copied!

Thank you all for your answers.I am close to find the solution.

the admin user who runs Asynchronous Processing Service can successfully run the process which sends the email to (assigned to )user.

the problem still persist to other users.

any ideas ??

Was this reply helpful? Yes No
Suggested answer

Community Member on at

Like (0)

Report
Copy link

Link copied!

If this hasn't been resolved already, I'm guessing the delegate permissions would also need to be set at the Exchange level for the mailbox?

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report
Copy link

Link copied!

I would think twice about configuring CRM Service Accounts to be CRM users as well:

Microsoft Dynamics 365 services and application pool (CRMAppPool) identity accounts must not be configured as a Microsoft Dynamics 365 user. Doing so can cause authentication issues and unexpected behavior in the application for all Microsoft Dynamics 365 users:

https://technet.microsoft.com/en-us/library/hh699825.aspx#BKMK_AsyncPerms

https://technet.microsoft.com/en-us/library/hh699825.aspx

Was this reply helpful? Yes No