Can only see security roles in default BU

(0) Share

Report

Posted on by Cyclefitness

This is my first foray into implementing security, so I'm a bit confused. I am trying to assign Security Roles to entity forms and I'm only seeing the default Business Unit, of which I am a member as an Administrator. All the forms and the entire solution are intended for a child Business Unit named Social Services. Why do I need see the roles associated with that BU in the list from which to pick?

*This post is locked for comments

I have the same question (0)

All responses (12)

Answers (0)

Community Member on at

Like (0)

Report

If you have a specific Security role specific to Social Services BU only, then it can listed in the above list. I believe you would need to maintain different security roles specific to your child BUs and assign the forms.

Would appreciate if you verify and mark as answered if it answers.

Was this reply helpful? Yes No
Cyclefitness on at

Like (0)

Report

The security roles are assigned to the child BU. However, I'm an Admin in the default BU. And I'm only seeing the Security Rules in that default BU, not it's child BU.

Was this reply helpful? Yes No
Suggested answer

razdynamics 17,308 User Group Leader on at

Like (0)

Report

Hi Deb, is qa your root business unit or a child ?

Security role are always in contect to a business unit, so thats what BU always needs to be explicit when stating a security role. When you create a security role it should always be under the root BU, and crm will create a copy for every other BU. so this is why its listing the Root BU.

Does this answer your question?

Best Wishes, Raz

Was this reply helpful? Yes No
Suggested answer

NicksTuk 1,833 on at

Like (0)

Report

You can only do that in the core solution, not in a custom solution. As you have described, in a custom solution you will only get to select from the security roles in the top business unit. If you edit the core solution, then you are presented with the security roles from all business units.

Not ideal, but I suspect it has to do with the fact that custom security roles in child business units are not portable with a solution either.

Was this reply helpful? Yes No
Cyclefitness on at

Like (0)

Report

Yes, QA is my root. Social Services is the child. I created the Security Roles in Social Services. Should I recreate them in QA?

Was this reply helpful? Yes No
Suggested answer

razdynamics 17,308 User Group Leader on at

Like (0)

Report

Debra, its quite a common mistake to create the roles in the child BU, you should definitely create all your security roles against your Root BU.

Please try this and let me know

Best Wishes, Raz

Was this reply helpful? Yes No
Cyclefitness on at

Like (0)

Report

Thank you, Raz. This doesn't make sense to me, though. I thought Roles were BU based? Based on what you're saying, you could have one person in the default BU with Role A and one person in the child BU with Role A; two people in different BUs using the same Role. So any privilege that is BU based would only apply to their BU. Is that correct???

And why can you filter the Roles View by BU if they always belong to the default?

Was this reply helpful? Yes No
Suggested answer

Drew Poggemann 4 on at

Like (0)

Report

Hi Debra,

Dynamics CRM will let you define new roles at the business unit level and you can at that point assign the form to the role within that business unit, it will show up in the list. I just verified this by creating a new role at the child business unit level, went to the assign security roles for the form and that new role shows only for the child business unit.

Yes, you should be able to create roles that are specific to business units and I have done this where it makes sense because one business unit has very different roles than another business unit in the same implementation.

If you create the role at the parent business unit, you can only select that role from the parent, not the child business unit, sorry. Would be nice though if this was possible!

Thanks much,

Was this reply helpful? Yes No
Suggested answer

razdynamics 17,308 User Group Leader on at

Like (0)

Report

Hi Debra, Yes Roles are BU Based, and you can create seperate roles for different BUs. But I advise to create your Roles at BU Level, and let crm replicate a copy to the specific BU.

A Security Role executes in the context to which the User belongs, so whether the user belongs to the root or the child, what you think seems like the same security role, is actually not as it will only execute for the users context.

Also When the role is created under the root, when it comes to moving your Solution to UAT or Prod, it will apply your customisation in a uniformed manner, so if you have Business Units missing in your Target which you have not yet created the security role customisations will still work for you.

Does this clarify things?

Best Wishes, Raz

Was this reply helpful? Yes No
Cyclefitness on at

Like (0)

Report

Yes, thank you so much for the extra time, Raz.

Was this reply helpful? Yes No