web
You’re offline. This is a read only version of the page.
close
Skip to main content
Community site session details

Community site session details

Session Id :
Microsoft Dynamics CRM (Archived)

Make custom entity accessible through Administrative Access Mode

(0) ShareShare
ReportReport
Posted on by 370
Hi, we have a requirement to develop a custom User Admin security role that has the ability to create users, assign roles, maintain a sub grid(custom entity N : 1 with User) on User form. Currently, to prevent User seeing business data, we set the access mode to Administrative then User wouldn't have access to the sub grid. If we set the access mode to Read Write, this role would have access to all business data. Is there a way to achieve it?

*This post is locked for comments

I have the same question (0)
  • Erin Peng Profile Picture
    370 on at
    RE: Make custom entity accessible through Administrative Access Mode

    Unfortunately it doesn't work. My understanding of assigning security role is like sharing permissions. If the super user doesn't have permission themselves (e.g. Write permission on Account), they can't assign a security role which has this permission. That's what we are facing. Some security roles the Super user needs to assign have Org level write access to Account, Opportunities...

  • Suggested answer
    AndrewLy365lyf Profile Picture
    6 Most Valuable Professional on at
    RE: Make custom entity accessible through Administrative Access Mode

    I understand the issue, because it is on the form it needs read access to display these elements.  Can you try giving quarter circle permission for company and opportunity?  This will provide just read of companies and opportunities that this user owns (which should be none).

  • Erin Peng Profile Picture
    370 on at
    RE: Make custom entity accessible through Administrative Access Mode

    Hi Andrew, thanks for you reply. I tried removing permission to Company, Opportunities... these business data entities from the custom User Admin(super user role, copied from System Admin). I set up a user with this role and assign read write license. It is all good except "Insufficient Permission" displays when I try to assign a security role that has  access to these entities.

    Do you have other ideas? Thanks

    Erin

  • Suggested answer
    AndrewLy365lyf Profile Picture
    6 Most Valuable Professional on at
    RE: Make custom entity accessible through Administrative Access Mode

    Create a new Security Role call it 'Super User', give it just the permissions required for managing users, assigning roles etc.  Leave access to read / write.  The trick is preventing the user giving itself Adminitrator role, for that you may need to assign particular roles to a business unit and then give the user access to assign only roles in his/her business unit (may need to play around a bit to get this working).

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Mansi Soni – Community Spotlight

We are honored to recognize Mansi Soni as our August 2025 Community…

Congratulations to the July Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
Community Member Profile Picture

Community Member 2

#2
Christoph Pock Profile Picture

Christoph Pock 1

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans