Skip to main content

Notifications

Microsoft Dynamics CRM (Archived)

Make custom entity accessible through Administrative Access Mode

Posted on by 370
Hi, we have a requirement to develop a custom User Admin security role that has the ability to create users, assign roles, maintain a sub grid(custom entity N : 1 with User) on User form. Currently, to prevent User seeing business data, we set the access mode to Administrative then User wouldn't have access to the sub grid. If we set the access mode to Read Write, this role would have access to all business data. Is there a way to achieve it?

*This post is locked for comments

  • Erin Peng Profile Picture
    Erin Peng 370 on at
    RE: Make custom entity accessible through Administrative Access Mode

    Unfortunately it doesn't work. My understanding of assigning security role is like sharing permissions. If the super user doesn't have permission themselves (e.g. Write permission on Account), they can't assign a security role which has this permission. That's what we are facing. Some security roles the Super user needs to assign have Org level write access to Account, Opportunities...

  • Suggested answer
    AndrewLy365lyf Profile Picture
    AndrewLy365lyf 1,356 Most Valuable Professional on at
    RE: Make custom entity accessible through Administrative Access Mode

    I understand the issue, because it is on the form it needs read access to display these elements.  Can you try giving quarter circle permission for company and opportunity?  This will provide just read of companies and opportunities that this user owns (which should be none).

  • Erin Peng Profile Picture
    Erin Peng 370 on at
    RE: Make custom entity accessible through Administrative Access Mode

    Hi Andrew, thanks for you reply. I tried removing permission to Company, Opportunities... these business data entities from the custom User Admin(super user role, copied from System Admin). I set up a user with this role and assign read write license. It is all good except "Insufficient Permission" displays when I try to assign a security role that has  access to these entities.

    Do you have other ideas? Thanks

    Erin

  • Suggested answer
    AndrewLy365lyf Profile Picture
    AndrewLy365lyf 1,356 Most Valuable Professional on at
    RE: Make custom entity accessible through Administrative Access Mode

    Create a new Security Role call it 'Super User', give it just the permissions required for managing users, assigning roles etc.  Leave access to read / write.  The trick is preventing the user giving itself Adminitrator role, for that you may need to assign particular roles to a business unit and then give the user access to assign only roles in his/her business unit (may need to play around a bit to get this working).

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

December Spotlight Star - Muhammad Affan

Congratulations to a top community star!

Top 10 leaders for November!

Congratulations to our November super stars!

Community AMA December 12th

Join us as we continue to demystify the Dynamics 365 Contact Center

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,240 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,149 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans