Finance | Project Operations, Human Resources, ...

Duties and Privileges Security Diagnostic

(2) Share

Report

Posted on by Kim.A

Hi,

Please may you assist me.

I find the Security Diagnostic option very useful for identifying missing roles, duties and privileges; however, it is only in our System Admin role. I really believe it will be useful for troubleshooting to add it into all user roles for them to share missing security items with our teams as a fist line form of self help.

Are there any risks in adding this to all users?
What are the duties or privileges for me to allocate this to our business roles?

Regards

Kim

I have the same question (0)

All responses (2)

Answers (0)

Sort by

Suggested answer

Adis 6,864 Super User 2026 Season 2 on at

Like (0)

Report
Copy link

Link copied!

Hey,

ad 1.:

As long as they arent able to assign roles, duties or privileges, I dont see any risk here. Keep in mind that changing security isnt just about permissions, but also about licensing.

ad 2.:

There is an topic on this. It seems that a customization is required.

Access to View Security Diagnostics (dynamics.com)

Kind regards, Adis

Was this reply helpful? Yes No
André Arnaud de Cal... 306,725 Super User 2026 Season 2 on at

Like (0)

Report
Copy link

Link copied!

Hi Kim,

In addition to the reply from Adis, here are my two cents.

What will be the purpose of adding this Security diagnostics to all users? I can imagine that a system administrator or security administrator needs this for troubleshooting or checking what security objects to use for creating custom security roles.

In my opinion, it will not have a risk but also doesn't make sense to give read access to all users. If they e.g. are missing access to All customers. they are not able to open this security diagnostics anyway for that form as they can't open it. Maybe a colleague is having access to All customers, but please keep the responsibilities for managing security to the correct persons in an organization. A user is not able to know if they need a Sales Manager, Sales Clerk, Accounts Receivable manager, or e.g. a Collections manager role.

If you insist on continuing with adding permissions for the security diagnostics, then before adding a privilege as customization or configuration for the Security diagnostics you can check if this is already added to the standard as part of an update.

Was this reply helpful? Yes No