User does not have the privilege to act on behalf another user

(0) Share

Report

Posted on by Community Member Microsoft Employee

hello,

when I assign a task to another user I get an error, the process stucks on this system job "SendEmailWhenTaskAssigned"

and here is the details of the error :

"Workflow paused due to error: Unhandled Exception: Microsoft.Crm.CrmException: User does not have the privilege to act on behalf another user.

at Microsoft.Crm.BusinessEntities.SecurityLibrary.VerifyUser(Guid user, ExecutionContext context)
at Microsoft.Crm.BusinessEntities.ExecutionContext.SetCaller(Guid callerId, Boolean setCallerLanguage, Boolean verifyUser)
at Microsoft.Crm.BusinessEntities.ExecutionContext.OnBeginRequest(Guid userId, Boolean startTransaction, IsolationLevel isolationLevel, ExecutionOperationContext operationContext, CallerOriginToken originToken)
at Microsoft.Crm.Workflow.WorkflowTransactionContext.OnBeginRequest()
at Microsoft.Crm.Workflow.Services.ActivityServiceBase.ExecuteInTransactedContext(ActivityDelegate activityDelegate)
at Microsoft.Crm.Workflow.Services.SendEmailActivityService.ExecuteInternal(ActivityContext executionContext, SendEmail sendEmail)
at Microsoft.Crm.Workflow.Services.SendEmailActivityService.Execute(ActivityContext executionContext, SendEmail sendEmail)
at System.Activities.CodeActivity.InternalExecute(ActivityInstance instance, ActivityExecutor executor, BookmarkManager bookmarkManager)
at System.Activities.Runtime.ActivityExecutor.ExecuteActivityWorkItem.ExecuteBody(ActivityExecutor executor, BookmarkManager bookmarkManager, Location resultLocation) ".

I am admin on crm and " act on behlaf of onther user " option is enabled.

Thank You

*This post is locked for comments

All responses (10)

Answers (1)

Community Member Microsoft Employee on at

Like (0)

Report

RE: User does not have the privilege to act on behalf another user

I would think twice about configuring CRM Service Accounts to be CRM users as well:

Microsoft Dynamics 365 services and application pool (CRMAppPool) identity accounts must not be configured as a Microsoft Dynamics 365 user. Doing so can cause authentication issues and unexpected behavior in the application for all Microsoft Dynamics 365 users:

https://technet.microsoft.com/en-us/library/hh699825.aspx#BKMK_AsyncPerms

https://technet.microsoft.com/en-us/library/hh699825.aspx
Suggested answer

Community Member Microsoft Employee on at

Like (0)

Report

RE: User does not have the privilege to act on behalf another user

If this hasn't been resolved already, I'm guessing the delegate permissions would also need to be set at the Exchange level for the mailbox?
Community Member Microsoft Employee on at

Like (0)

Report

RE: User does not have the privilege to act on behalf another user

Thank you all for your answers.I am close to find the solution.

the admin user who runs Asynchronous Processing Service can successfully run the process which sends the email to (assigned to )user.

the problem still persist to other users.

any ideas ??
Community Member Microsoft Employee on at

Like (0)

Report

RE: User does not have the privilege to act on behalf another user

Check to see if the user is assign to any Teams and Security Roles.

Make sure that user only has one Security Role and one Team.

Otherwise CRM sometime get confused in which Security Roles or team to use.

-damon
Community Member Microsoft Employee on at

Like (0)

Report

RE: User does not have the privilege to act on behalf another user

i checked CRM Asynchronous Processing Service, it runs under logged in user ( admin user) who has " act on behalf" and member of PrivUserGroup.

Mohamad
Royal King 27,686 on at

Like (0)

Report

RE: User does not have the privilege to act on behalf another user

Does workflow runs on logged in user or some service account? If workflow runs under common user account may be that account missing "Act on behalf" privilege.
Community Member Microsoft Employee on at

Like (0)

Report

RE: User does not have the privilege to act on behalf another user

yes he has it.
Royal King 27,686 on at

Like (0)

Report

RE: User does not have the privilege to act on behalf another user

Does user Role has Act on behalf privilege ?
Community Member Microsoft Employee on at

Like (0)

Report

RE: User does not have the privilege to act on behalf another user

It's already checked and it's not working
Verified answer

Manoj_Chauhan 140 on at

Like (0)

Report

RE: User does not have the privilege to act on behalf another user

Error comes when a user does not allow the other user to send email on his behalf , so you need to allow with user you want to send email

File ->option -> Email -> check the below option -> click ok