Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Dynamics 365 Community / Forums / Customer experience | Sales, Customer Insights,... / Security role for Cust...
Customer experience | Sales, Customer Insights,...
Unanswered

Security role for Custom Activity entity - 'write' privilege not working

(0) ShareShare
ReportReport
Posted on by Greg_Adams22 10

Hi,

I'm having issues trying to troubleshoot one of my roles for my client. 

Requirement: 

I have to create a custom activity (Approval Activities) which allows users to only approve their activities linked to 'Campaign'.

Users can see all 'Campaign' records, but only able to update their Business Unit 'Campaigns. That's working.

When an approval activity gets created for the relevant approver (for Approval Activity).

Only that approver (user) can update their records linked to 'Campaign' record.

This is my current setup and its not working. Users are able to update each others approval activities:

Image


Campaign section:
Image

What we also picking up:

If campaign owner captures the Campaign (or I assign him/her a campaign), they can edit all of the activities (even though his role is Read=Basic(User) privilege). If someone else owns the Campaign then they can't as we intend.

Please assist?

Thanks

  • InferiFi Support Profile Picture
    InferiFi Support 85 on at
    RE: Security role for Custom Activity entity - 'write' privilege not working

    Hi,

    As mention in the screen shots the (SHARE) privileges with the access level of (half pie Business Unit) are assigned to the users.

    Image

    Change the access level of the (SHARE) privileges to (None Selected) to restrict the users to update the record they don’t owned. As SHARE) privilege required to give access to a record to another user while keeping your own access. Which records can be shared depends on the access level of the permission defined in your security role.

    The owner of a record or a person who has the Share privilege on a record can share a record with other users or teams. Sharing can add Read, Write, Delete, Append, Assign, and Share privileges for specific records.

    Hope this works for you,

    Please mark the answer as verified, if it resolve your issue.

    Thanks,

  • Greg_Adams22 Profile Picture
    Greg_Adams22 10 on at
    RE: Security role for Custom Activity entity - 'write' privilege not working

    Hi Jim,

    I have checked that yes. They have the correct access - I'm checking that the relationship between Campaign and Activity is not the reason. Currently its built on Parental, I'm trying Cascading now. Will advise shortly.

    Thanks and I do appreciate the help.

    Regards

    Greg

  • jim.corriveau@chesterton.com Profile Picture
    jim.corriveau@chest... 327 on at
    RE: Security role for Custom Activity entity - 'write' privilege not working

    Greg,

    Have the User goto the Activity record, in the button bar click Check Access, this should show you what access the User has to the record and what roles provide that access.  This should confirm that only Campaign Admin Test is granting access to activities.

  • Greg_Adams22 Profile Picture
    Greg_Adams22 10 on at
    RE: Security role for Custom Activity entity - 'write' privilege not working

    Hi Jim,

    If you go through my initial request. Users are able to update their own activity. The issue is that users are able to update activity records they don't own with write-user level privilege. That shouldn't be the case.

    Thanks

    Greg

  • jim.corriveau@chesterton.com Profile Picture
    jim.corriveau@chest... 327 on at
    RE: Security role for Custom Activity entity - 'write' privilege not working

    Greg,

    Is the User trying to update an Activity that they own?

  • Greg_Adams22 Profile Picture
    Greg_Adams22 10 on at
    RE: Security role for Custom Activity entity - 'write' privilege not working

    That didn't work.

  • Greg_Adams22 Profile Picture
    Greg_Adams22 10 on at
    RE: Security role for Custom Activity entity - 'write' privilege not working

    Hi Jim,

    Just to confirm my understanding is correct:

    I'm changing Append and Append To on 'Activity' from half pie(Business Unit) to full pie(Organization)

    That's it?

    Thanks

    G

  • jim.corriveau@chesterton.com Profile Picture
    jim.corriveau@chest... 327 on at
    RE: Security role for Custom Activity entity - 'write' privilege not working

    Greg,

    Try giving Organization Append and Append To on the Activity.  The User can read all Campaigns but can only Append/Append To ones owned by Users in their business unit or below.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

December Spotlight Star - Muhammad Affan

Congratulations to a top community star!

Top 10 leaders for November!

Congratulations to our November super stars!

Tips for Writing Effective Suggested Answers

Best practices for providing successful forum answers ✍️

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,253 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,188 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans