Skip to main content

Notifications

Announcements

Join us in the Community for an AMA: December 12th Register Today
News and Announcements icon
Dynamics 365 Community / Forums / Microsoft Dynamics CRM (Archived) / Insufficient permissio...
Microsoft Dynamics CRM (Archived)

Insufficient permissions different times of day

(0) ShareShare
ReportReport
Posted on by Community Member Microsoft Employee

Hello,

We have a user with Marketing permissions who can normally enter Leads without a problem during the day.  However, every time this user tries to enter Leads late in the evening, she gets an Insufficient Permissions error "You do not have permissions to access these records. Contact your Microsoft Dynamics CRM administrator". 

This user is only associated with the default Team.  The Work Hours are not set, so everything shows All Day on her calendar.  I cannot find anything that would indicate different permissions during business hours vs after hours, yet the system seems to behave that way.   

We are using CRM 2015.

Any idea what else may be causing permissions change during different time of the day?

Any help would be greatly appreciated.

Mag

*This post is locked for comments

  • Community Member Profile Picture
    Community Member Microsoft Employee on at
    RE: Insufficient permissions different times of day

    You fixed it Prashant!  Thank you very much for your help!

  • Suggested answer
    Gopalan Bhuvanesh Profile Picture
    Gopalan Bhuvanesh 11,397 on at
    RE: Insufficient permissions different times of day

    Please check this:

    https://debajmecrm.com/2014/07/18/user-missing-prvreadcomplexcontrol-privilege-error-in-microsoft-dynamics-crm/

  • Verified answer
    PS Profile Picture
    PS 23,577 on at
    RE: Insufficient permissions different times of day

    Check the security role of the user getting this issue, let's assume that the security role is salesperson

    Go to settings >>security >> security role >>salesperson >>customisation tab>> process configuration >> assign read privilege

  • Community Member Profile Picture
    Community Member Microsoft Employee on at
    RE: Insufficient permissions different times of day

    There's no option to Download the log file, just a Close button.  

    However I found below Event log on the server for the user when this happened.

    Event code: 3005

    Event message: An unhandled exception has occurred.

    Event time: 3/28/2017 7:15:25 AM

    Event time (UTC): 3/28/2017 11:15:25 AM

    Event ID: 52579ccaf32e453d9a8754b7e1c4b130

    Event sequence: 954798

    Event occurrence: 4969

    Event detail code: 0

    Application information:

       Application domain: /LM/W3SVC/2/ROOT-1-131351119408754808

       Trust level: Full

       Application Virtual Path: /

       Application Path: C:\Program Files\Microsoft Dynamics CRM\CRMWeb\

       Machine name: CRM

    Process information:

       Process ID: 3324

       Process name: w3wp.exe

       Account name: NT AUTHORITY\NETWORK SERVICE

    Exception information:

       Exception type: HttpUnhandledException

       Exception message: Exception of type 'System.Web.HttpUnhandledException' was thrown.

      at System.Web.UI.Page.HandleError(Exception e)

      at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

      at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

      at System.Web.UI.Page.ProcessRequest()

      at System.Web.UI.Page.ProcessRequest(HttpContext context)

      at System.Web.HttpServerUtility.ExecuteInternal(IHttpHandler handler, TextWriter writer, Boolean preserveForm, Boolean setPreviousPage, VirtualPath path, VirtualPath filePath, String physPath, Exception error, String queryStringOverride)

    Principal user (Id=d195ec08-3a27-dd11-886a-001a64d2b64e, type=8) is missing prvReadComplexControl privilege (Id=a4736385-9763-4a64-a44b-cd5933edc631)

      at Microsoft.Crm.Application.Platform.ServiceCommands.PlatformCommand.XrmExecuteInternal()

      at Microsoft.Crm.Application.Platform.ServiceCommands.RetrieveCommand.Execute()

      at Microsoft.Crm.Caching.ComplexControlLoader.LoadCacheData(Guid key, IOrganizationContext context)

      at Microsoft.Crm.Caching.CrmMultiOrgCacheBase`2.CreateEntry(TKey key, IOrganizationContext context)

      at Microsoft.Crm.Caching.CrmMultiOrgCacheBase`2.LookupEntry(TKey key, IOrganizationContext context)

      at Microsoft.Crm.Application.Components.Sdk.InlineEditControls.Web.CompositionLinkControl.GetFlyOutDescriptor()

      at Microsoft.Crm.Application.Components.Sdk.InlineEditControls.Web.LinkControl.GetRequiredColumns(Int32 entityTypeCode)

      at Microsoft.Crm.Application.Forms.CompositeControlVisitor.HandleColumnProvider(Control control, FormDescriptor formDescriptor)

      at Microsoft.Crm.Application.InlineEdit.Mediators.FormMediator.AddControlProperties(ICrmControl crmControl, ControlDescriptor controlDescriptor)

      at Microsoft.Crm.Application.InlineEdit.Mediators.FormMediator.ProcessControlHierarchy(Action`2 controlHandler)

      at Microsoft.Crm.Application.InlineEdit.Mediators.FormMediator.GetInstance(FormFactor formFactor, FormDescriptor descriptor, Guid processId, Int64 processVersionNumber, IOrganizationContext organizationContext)

      at Microsoft.Crm.Application.InlineEdit.Mediators.FormMediator.GetInstance(FormFactor formFactor, Int32 entityTypeCode, Guid processId, Int64 processVersionNumber, IOrganizationContext organizationContext)

      at Microsoft.Crm.Application.InlineEdit.ReadFormDataBuilder..ctor(String recordId, String entityTypeCode, Guid formId, FormFactor formFactor)

      at Microsoft.Crm.Application.InlineEdit.ReadFormDataBuilder..ctor(String recordId, String entityTypeCode, FormFactor formFactor)

      at Microsoft.Crm.Application.Pages.Common.ReadFormPage.PopulateFormDescriptorAndDataBuilder()

      at Microsoft.Crm.Application.Pages.Common.ReadFormPage.OnPreInit()

      at Microsoft.Crm.Application.Controls.AppUIPage.OnInit(EventArgs e)

      at Microsoft.Crm.Application.Controls.AppPage.OnInit(EventArgs e)

      at System.Web.UI.Control.InitRecursive(Control namingContainer)

      at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

    Request information:

       Request URL: crm/.../main.aspx;extraqs=?etc=4&pagemode=iframe&pagetype=entityrecord

       Request path: /medical/main.aspx

       User host address: XXX.XXX.XXX.X

       User: domain\username

       Is authenticated: True

       Authentication Type: Negotiate

       Thread account name: NT AUTHORITY\NETWORK SERVICE

    Thread information:

       Thread ID: 73

       Thread account name: NT AUTHORITY\NETWORK SERVICE

       Is impersonating: False

       Stack trace:    at System.Web.UI.Page.HandleError(Exception e)

      at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

      at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

      at System.Web.UI.Page.ProcessRequest()

      at System.Web.UI.Page.ProcessRequest(HttpContext context)

      at System.Web.HttpServerUtility.ExecuteInternal(IHttpHandler handler, TextWriter writer, Boolean preserveForm, Boolean setPreviousPage, VirtualPath path, VirtualPath filePath, String physPath, Exception error, String queryStringOverride)

    Custom event details:

  • Suggested answer
    PS Profile Picture
    PS 23,577 on at
    RE: Insufficient permissions different times of day

    When he/she receives this error, 'Download the log file' and share it here

  • Suggested answer
    Dynamics_Alok Profile Picture
    Dynamics_Alok 1,746 on at
    RE: Insufficient permissions different times of day

    I dont think Security Role works differently on different time of Day.Either there must be some scheduler to assign record or to change Security role.

  • Community Member Profile Picture
    Community Member Microsoft Employee on at
    RE: Insufficient permissions different times of day

    Yes, we do have custom plugins and custom workflows, but I can't see how any of them could affect permissions during different time of day.  I can enable tracing and check for errors after hours tonight.  

    Thanks.

    Mag

  • tw0sh3ds Profile Picture
    tw0sh3ds 5,600 on at
    RE: Insufficient permissions different times of day

    There is no out-of-the box functionality that is messing with the Security roles on timely manner. Do you have any customizations like plugins, Custom workflow acitivities, Custom Apps integrated to CRM? Can you enable tracing on the server and check the exact error message in trace?

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

News and Announcements

Join us in the Community for an AMA: December 12th Register Today

Quick Links

December Spotlight Star - Muhammad Affan

Congratulations to a top community star!

Top 10 leaders for November!

Congratulations to our November super stars!

Community AMA December 12th

Join us as we continue to demystify the Dynamics 365 Contact Center

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,240 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,149 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans