web
You’re offline. This is a read only version of the page.
close
Skip to main content
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Microsoft Dynamics CRM (Archived) / Insufficient permissio...
Microsoft Dynamics CRM (Archived)

Insufficient permissions error on Model Driven App

(0) ShareShare
ReportReport
Posted on by Sam.Misemer

Hello all-

First I apologize if I am in the wrong place, I am new to model driven apps, but the only results I was finding for my specific error were in this forum.

I am trying to share a model driven app and followed the directions here (https://docs.microsoft.com/en-us/powerapps/maker/model-driven-apps/share-model-driven-app) and created a security role in the Dynamics Security UI, then added my new entities to that role ( One entity with several fields), then added that role to users, then added that role to my app. No Luck, users still not able to access the app.

I have two other admins that I am using to test and even after I have verified they have the system Administrator role, they still cannot access the app, and this is the error received (in edge, to make sure it wasn't a chrome cache issue)

  • Error Code: 2147746336
  • Session Id: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
  • Timestamp: Wed Mar 06 2019 11:46:06 GMT-0500 (Eastern Standard Time)
Principal user (Id=XXXXXXXXXXXXXXXXXXXXXXXXXX, type=8, roleCount=1, privilegeCount=555, accessMode=1(Setup/Stub user with filtered privileges from associated roles. Consider changing user AccessMode to Full (without privilege filtering)), is missing prvReadAppModule privilege (Id=XXXXXXXXXXXXXXXXXXXXXXXX) on OTC=9006
at Microsoft.Crm.Extensibility.OrganizationSdkServiceInternal.Execute(OrganizationRequest request, InvocationContext invocationContext, CallerOriginToken callerOriginToken, WebServiceType serviceType, Boolean checkAdminMode, ExecutionContext executionContext, Dictionary`2 optionalParameters) at Microsoft.Crm.Extensibility.OData.CrmODataExecutionContext.Execute(OrganizationRequest request, ExecutionContext executionContext) at Microsoft.Crm.Extensibility.OData.CrmODataServiceDataProvider.ExecuteOperation(CrmODataExecutionContext context, EdmOperation edmOperation, Dictionary`2 parameters, Dictionary`2 boundParameters) at Microsoft.Crm.Extensibility.OData.ActionController.ProcessOperationRequest(String operationName, Dictionary`2 operationParameters, EntityReference entityReference, String boundEntityName, String boundEntityType) at Microsoft.Crm.Extensibility.OData.ActionController.<>c__DisplayClass12_0.<GetUnboundFunction>b__0() at Microsoft.PowerApps.CoreFramework.ActivityLoggerExtensions.Execute[TResult](ILogger logger, EventId eventId, ActivityType activityType, Func`1 func, IEnumerable`1 additionalCustomProperties) at Microsoft.Xrm.Telemetry.XrmTelemetryExtensions.Execute[TResult](ILogger logger, XrmTelemetryActivityType activityType, Func`1 func) at lambda_method(Closure , Object , Object[] ) at System.Web.Http.Controllers.ReflectedHttpActionDescriptor.ActionExecutor.<>c__DisplayClass10.<GetExecutor>b__9(Object instance, Object[] methodParameters) at System.Web.Http.Controllers.ReflectedHttpActionDescriptor.ExecuteAsync(HttpControllerContext controllerContext, IDictionary`2 arguments, CancellationToken cancellationToken) --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Web.Http.Controllers.ApiControllerActionInvoker.<InvokeActionAsyncCore>d__0.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Web.Http.Controllers.ActionFilterResult.<ExecuteAsync>d__2.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw() at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Web.Http.Dispatcher.HttpControllerDispatcher.<SendAsync>d__1.MoveNext()
Sorry if I am being over cautious with the XXXXs but better safe than sorry. So from parsing this, I can see that Dynamics is upset that the user is missing prvReadAppModule privilege, but I cannot find that anywhere in security roles. I found this...(https://docs.microsoft.com/en-us/dynamics365/customer-engagement/web-api/appmodule?view=dynamics-ce-odata-9) but nothing that is exactly prvReadAppModule, so I am at a loss.
When I open and run the app, or view the data in the entity, or add to the data using a canvas app or enter data directly, everything works great...now if I can just figure out how to get others to be able to use it...
Any thoughts from anyone would be greatly appreciated, even a point in the right direction if this is the wrong place.
Thank you in advance!!
-Sam

*This post is locked for comments

I have the same question (0)
  • Sam.Misemer Profile Picture
    Sam.Misemer on at
    RE: Insufficient permissions error on Model Driven App

    Flydancer-

    Thanks for your response! I had seen that (the app permission) and it was enabled, but I have further information. I had NOT checked with any of my NON admin users that I had shared this with, and I was just attempting to show one of them what the issue was and wonder of wonders, it's working fine for them.

    Apparently having the system administrator role is borking up the permissions in some way, but my immediate issue is resolved, and I am going to mark your answer as the correct one so as not to waste more people's time.

    TL;DR - Test Model driven apps with a NON SysAdmin user account when sharing. Thanks for your assistance in any case and happy helping :)

    -Sam

  • Verified answer
    Flydancer Profile Picture
    Flydancer 1,332 on at
    RE: Insufficient permissions error on Model Driven App

    In the security role management have a look in the "customization" Tab, there should be "App" (I don't have an english environment so it could be named somewhat else, It's the third Entity from top)

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

News and Announcements

Dynamics 365 Community Calls Return
Join experts in person to explore low code and AI agents at the Power Platform Community Conference sponsored by Microsoft
Our Community Code of Conduct has been updated!

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Andrés Arias – Community Spotlight

We are honored to recognize Andrés Arias as our Community Spotlight honoree for…

Congratulations to the August Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
Aric Levin - MVP Profile Picture

Aric Levin - MVP 2 Moderator

#2
MA-04060624-0 Profile Picture

MA-04060624-0 1

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans