Microsoft Dynamics CRM (Archived)

Access Is Denied Error To Administrator When Updating A Lead

(1) Share

Report

Posted on by Community Member

Hello,

From today, I am facing a critical issue when updating any lead in Microsoft Dynamics 365 as an Administrator Role.

0842.Access-Error.PNG

Please help me in this matter. i don't know why An admin role is getting this access error.

Thanks.

*This post is locked for comments

I have the same question (0)

All responses (12)

Answers (1)

Loic Orue 927 on at

Like (1)

Report

Hello,

Could you copy the Log File contents here?

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Unhandled Exception: System.ServiceModel.FaultException`1[[Microsoft.Xrm.Sdk.OrganizationServiceFault, Microsoft.Xrm.Sdk, Version=8.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35]]: SecLib::AccessCheckEx failed. Returned hr = -21472131187962, ObjectID: 78ac1c01-6166-e711-814e-c4346bd123d3161, OwnerId: 191021231f75e-dasd-e611-812a-c4346bdcdf61, OwnerIdType: 8 and CallingUser: 1910f75e-56ec-e611-812a-c4346bdcdf61. ObjectTypeCode: 4, objectBusinessUnitId: 4eb2ea81-5e86-e711-8121-c4346bdcdf41, AccessRights: ReadAccess Detail:

<OrganizationServiceFault xmlns:i="www.w3.org/.../XMLSchema-instance" xmlns="schemas.microsoft.com/.../Contracts">

<ActivityId>f6fd1262a5-55a0-4ad9-94ef-02adasd7f1d73387e</ActivityId>

<ErrorCode>-214712387962</ErrorCode>

<ErrorDetails xmlns:d2p1="schemas.datacontract.org/.../System.Collections.Generic" />

<Message>SecLib::AccessCheckEx failed. Returned hr = -211232147187962, ObjectID: assda-6166-e711-814e-c4346bdd3161, OwnerId: 1910f75e-56easdac-e611-812a-c4346bdcdf61, OwnerIdType: 8 and CallingUser: 1910f75e-56ec-e611-812a-sad. ObjectTypeCode: 4, objectBusinessUnitId: 4eb1232ea81-5e86-e711-8121-c4346bdcdf41, AccessRights: ReadAccess </Message>

<Timestamp>2017-08-31T12:58:57.1856278Z</Timestamp>

<ExceptionRetriable>false</ExceptionRetriable>

<ExceptionSource i:nil="true" />

<InnerFault i:nil="true" />

<OriginalException i:nil="true" />

<TraceText i:nil="true" />

</OrganizationServiceFault>

Was this reply helpful? Yes No
Suggested answer

Andreas Cieslik 9,267 on at

Like (0)

Report

Your user lacks the Read-right on the lead entity.

Could it be that you have a modified administrator role that is related to a lower hierarchy business unit?

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Hi Andreas,

I have One Root Business Unit P and 1 Child Business Unit C.

a normal User of C created a lead. Now, Admin Users in C and P both not able to Update that Lead.

Was this reply helpful? Yes No
Suggested answer

Andreas Cieslik 9,267 on at

Like (0)

Report

Please check the user's Access mode in the user entity.

You might have the wrong option set. For this action they need Read-Write mode.

Access mode. This setting determines the level of access for each user.

Read-Write access. By default, users have Read-Write access that allows them access to data for which they have appropriate permission set by security roles.

Administrative access. Allows access to areas that the user has appropriate permission set by security roles but doesn’t allow the user to view or access business data typically found in the Sales, Service, and Marketing areas, such as accounts, contacts, leads, opportunities, campaigns, and cases. For example, Administrative access can be used to create Dynamics 365 administrators who can have access to perform a complete variety of administrative tasks, such as create business units, create users, set duplicate detection, but cannot view or access any business data. Notice that users who are assigned this access mode do not consume a CAL.

Read access. Allows access to areas for which the user has appropriate access set by security role but the user with Read access can only view data and can’t create or change existing data. For example, a user with the system administrator security role who has read access can view business units, users, and teams but can’t create or modify those records.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Its Read-Write Acces is saved for Admin.

Was this reply helpful? Yes No
Andreas Cieslik 9,267 on at

Like (0)

Report

Can you please show screenshot of their assigned role and the lead permissions on that roles?

Was this reply helpful? Yes No
Suggested answer

prt33k 6,907 on at

Like (0)

Report

Hi Sandeep,

I believe when you say Admin role- you are referring to OOB System Administrator role.

Please assign the record to yourself and then try to update. If that is happening then it will a security role issue.

If not then probably you are having some plugin triggering under user account which is throwing error.

Thanks,

Prateek Srivastava

Was this reply helpful? Yes No
Suggested answer

Loic Orue 927 on at

Like (0)

Report

I agree with Prateek

You could try to open the system user with GUID 1910f75e-56ec-e611-812a-c4346bdcdf61 and check if that's your account or another account (which incidentally seems to be lacking the rights).

You can achieve this easily with the plugin "Level up for Dynamics 365" ==> Open Record By ID ==> systemuser ==> 1910f75e-56ec-e611-812a-c4346bdcdf61

If the user is not you, giving that account proper rights should do the trick. Then you need to check why that account is trying to read the record (plugin or workflow triggering).

Was this reply helpful? Yes No
Verified answer

Community Member on at

Like (0)

Report

Hi,

Thanks for all your responses.

I have figured out, what was causing this issue.

Actually, If an Admin is in Parent BU and Any other user in its child BU (Sales BU) created a lead. Dynamics will not allow the Admin to Update that record. This is strange behavior of dynamics.

Parent should know what his children's are doing.

Fix -

Change all children's BU to Parent BU and Then Re-Assign them Salesperson Role.

Note : You also need to make sure that there is no role given to both BUs.

Was this reply helpful? Yes No