Dynamics CRM 2011 Entity Permissions

(0) Share

Report

Posted on by marmstrong

We currently have about 45 users setup in Dynamics CRM 2011. All the users are under the default Business Unit and under the Default Team. The team itself has no security roles. All of our users have the exact same security role assigned to them (attached).

The issue we are having is that the 'user' setting on the Accounts entity doesn't seem to work. Any user can view any Account regardless of who owns that Account. The same holds true for contacts and leads. Even if we remove the security role from a user, that user can still view every account. We can not seam to figure out what we are missing on our security role so that users can only view their own Accounts, Contacts, Leads, etc.

We are on UR6 right now, so we should be up to date.

Any ideas?

Thanks,

Mark

*This post is locked for comments

I have the same question (0)

All responses (4)

Answers (0)

Sort by

Cada on at

Like (0)

Report
Copy link

Link copied!

I can't see what security role you're using, however if its the "salesperson role" it's set up so that everyone can see everything in the organisation. If a user has no security role, I would have thought they couldn't even log into CRM.

Was this reply helpful? Yes No
marmstrong 40 on at

Like (0)

Report
Copy link

Link copied!

We are using a role that we made. Here is what it looks like. We can't seem to figure out why the permissions are not working.

Was this reply helpful? Yes No
Suggested answer

Community Member on at

Like (0)

Report
Copy link

Link copied!

Mark, this is one of two things. More likely is that your user has the benefit of a security role either directly assigned to them, or assigned to a team of which they are a member. I'd be surprised if this isn't the case. If you remove the user from all teams and strip the role from the user, that user should not even be able to log into CRM at all. If you do so, and they can still log in, then you have a deeper issue with the security model that will require someone to examine service accounts, IIS, active directory and what accounts are deployed to CRM.

Was this reply helpful? Yes No
Mohammad Atif on at

Like (0)

Report
Copy link

Link copied!

Hi Mark,

Please find how the Team level and user level permissions works in CRM 2011:

•How Role-Based Security Can Be Used to Control Access to Entities in Microsoft Dynamics CRM: msdn.microsoft.com/.../gg334717.aspx

•User and Team Entities: msdn.microsoft.com/.../gg328485.aspx

•Privilege and Role Entities: msdn.microsoft.com/.../gg328230.aspx

If everything is done accordingly, then I request you to please open a MS support case to look into this issue in more details.

Thanks,

Mohammad

Was this reply helpful? Yes No