web
You’re offline. This is a read only version of the page.
close
Skip to main content

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Microsoft Dynamics CRM (Archived) / Assign record to user ...
Microsoft Dynamics CRM (Archived)

Assign record to user who belongs to different business unit.

(0) ShareShare
ReportReport
Posted on by Mihir Kadam

Hi,

Consider following scenario.

Two business unit mkadam2(Root business unit) and child business unit Mumbai

One user lets say subhash belongs to mkadam2 business unit and another user Sagar belongs to Mumbai business unit.

both user have same security role4375.Capture1.PNG

consider Department entity. Assign has business level access ,means subhash can assign record to user within same business unit.

Subhash created new record .click on save.assign to sagar who is belongs to different business unit.

Before assign

2867.Capture2.PNG

After assign

4745.Capture3.PNG

Record is assign to sagar then CRM showing access denied error.

Capture4.PNG

Now record is assign to sagar which is logically incorrect. can any one find solution for above problem.

*This post is locked for comments

I have the same question (0)
  • Community Member Profile Picture
    Community Member on at

    Can you pls click on download log file on the error message and post the contents here?

  • Mihir Kadam Profile Picture
    Mihir Kadam on at

    <s:Envelope xmlns:s="schemas.xmlsoap.org/.../&quot;><s:Body><s:Fault><faultcode>s:Client</faultcode><faultstring xmlns:xml="www.w3.org/.../namespace&quot; xml:lang="en-US">SecLib::AccessCheckEx failed. Returned hr = -2147187962, ObjectID: a7bd4627-ad31-e411-a2fb-d89d676560dc, OwnerId: b5a78c47-0721-e411-8b53-9cb65496433c,  OwnerIdType: 8 and CallingUser: bbe741dc-0621-e411-8b53-9cb65496433c. ObjectTypeCode: 10010, objectBusinessUnitId: 6173b0ce-8426-e411-84da-d89d67644f08, AccessRights: 524296 </faultstring><detail><OrganizationServiceFault xmlns="schemas.microsoft.com/.../Contracts&quot;><ErrorCode>-2147187962</ErrorCode><ErrorDetails /><Message>SecLib::AccessCheckEx failed. Returned hr = -2147187962, ObjectID: a7bd4627-ad31-e411-a2fb-d89d676560dc, OwnerId: b5a78c47-0721-e411-8b53-9cb65496433c,  OwnerIdType: 8 and CallingUser: bbe741dc-0621-e411-8b53-9cb65496433c. ObjectTypeCode: 10010, objectBusinessUnitId: 6173b0ce-8426-e411-84da-d89d67644f08, AccessRights: 524296 </Message><Timestamp>2014-09-01T10:33:14.241235Z</Timestamp><InnerFault><ErrorCode>-2147187962</ErrorCode><ErrorDetails /><Message>SecLib::AccessCheckEx failed. Returned hr = -2147187962, ObjectID: a7bd4627-ad31-e411-a2fb-d89d676560dc, OwnerId: b5a78c47-0721-e411-8b53-9cb65496433c,  OwnerIdType: 8 and CallingUser: bbe741dc-0621-e411-8b53-9cb65496433c. ObjectTypeCode: 10010, objectBusinessUnitId: 6173b0ce-8426-e411-84da-d89d67644f08, AccessRights: 524296 </Message><Timestamp>2014-09-01T10:33:14.241235Z</Timestamp><InnerFault xmlns:i="www.w3.org/.../XMLSchema-instance&quot; i:nil="true" /><TraceText xmlns:i="www.w3.org/.../XMLSchema-instance&quot; i:nil="true" /></InnerFault><TraceText xmlns:i="www.w3.org/.../XMLSchema-instance&quot; i:nil="true" /></OrganizationServiceFault></detail></s:Fault></s:Body></s:Envelope>

  • Balamurali Srinivasagan Profile Picture
    Balamurali Srinivas... 300 on at

    Hi Mihir,

    Could you give Parent: Child Business Units level access (rather than Business Unit level access) to Assign privilege and check whether it resolves your problem?

    Regards,

    Balamurali

  • Community Member Profile Picture
    Community Member on at

    Try giving Append / Append To privileges to Organization level, and also try other privileges for this entity. Like that you can use trial and error method to find the exact privilege which is missing. Once the error is gone, gradually decrease the privileges.

  • Community Member Profile Picture
    Community Member on at

    If you have access to the database, run the query:

    SELECT ObjectTypeCode,Name FROM EntityView where ObjectTypeCode = 10010

    to make sure that the error is related to the Department entity itself.

  • Mihir Kadam Profile Picture
    Mihir Kadam on at

    Its online mscrm, so i don't have access to Database. If i give parent-child business unit access level then it will not throw error.That is correct.  My question is if two user have same security role belong to different business unit and assign privilege has business level access then that user should not assign record to user who belongs to different business unit. hope question is clear now. If user try to assign record then it will throw error. But in current scenario crm throw error after record assign to user.

  • Balamurali Srinivasagan Profile Picture
    Balamurali Srinivas... 300 on at

    Hi Mihir,

    Thanks for clarifying question again.

    I think the database is not update with the new owner due to the error and it’s just the UI shows the new user on the lookup. Do you see the owner as Sagar even after refreshing the form or on the list view?

    Regards,

    Balamurali

  • Verified answer
    Talsim Profile Picture
    Talsim on at

    Hi,

    Your Logic has a flaw.

    you said : "Assign has business level access ,means subhash can assign record to user within same business unit."

    which is INCORRECT.

    Assign has business level access, means subhash can assign records that are CURRENTLY OWNED by users from HIS business unit

    not ASSIGN TO.

    in order to solve the issue, on USER RECORD access right, either change the READ priv to Business unit level (which means that he can only see users from his own BU)

    OR

    on the USER RECORD change the APPEND TO access level to Business unit level (which means that if he has organization level read, he could see all users but he cannot append users from other business units to any record.

    Cheers,

    Tal 

  • Aileen Gusni Profile Picture
    Aileen Gusni 44,524 on at

    Hi Kadam,

    "Consider following scenario.

    Two business unit mkadam2(Root business unit) and child business unit Mumbai

    One user lets say subhash belongs to mkadam2 business unit and another user Sagar belongs to Mumbai business unit."

    Brief answer, If you want to allow Subhash (Root BU) can assign his record to Sagar (Child BU), you need to increase to Parent Business Unit.

    Unless you want to assign from Subhash (mkadam2) to ABC in mkadam2 as well.

    Hope this helps!

    Thanks.

  • Mihir Kadam Profile Picture
    Mihir Kadam on at

    Hi Tal Simon,

    Thank you for your response. Problem is solved.

    Just giving business level access to read privilege of USER entity.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Introducing the 2026 Season 1 community Super Users

Congratulations to our 2026 Super Stars!

Meet the Microsoft Dynamics 365 Contact Center Champions

We are thrilled to have these Champions in our Community!

Congratulations to the April Top 10 Community Leaders

These are the community rock stars!

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
ScottDurow Profile Picture

ScottDurow 2

#2
GJones Profile Picture

GJones 1

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans