Security Roles creation from scratch

(0) Share

Report

Posted on by crmrsw15

685

Hi,

I have been requested to build security roles from scratch which will include a default user role and then layered security roles based on role type.

I feel this is a mammoth task that includes understanding all of the individual privileges and what they do and what association each have to each other.

Has anyone done this before and can advise on the approach taken? I am wondering if there is a OOTB base role to start from as the default role which can then be used to layer up from there?

*This post is locked for comments

I have the same question (0)

All responses (4)

Answers (2)

Verified answer

Megan V. Walker 1,841 Most Valuable Professional on at

Like (0)

Report

Hi. I would suggest starting from something like Sales Manager or Customer Service Representative role and copying one of those, then start removing rights. Good idea to have a test user that you can be logged in with on a different browser, then you can immediately see the impact of your changes. Just refresh (F5) the browser where your test user is logged in to and you should be able to test your changes.

If you start completely from scratch you would miss things which would give you more trouble than it's worth. Also, there are all of the miscellaneous privileges that need to be considered too. If you want more information on those, I have done a multiple part blog series that might help. Part 4 to be published later this week:

meganvwalker.com/miscellaneous-privileges-on-security-roles-part-one

Hope it helps!

Megan

Was this reply helpful? Yes No
Verified answer

ashlega 34,477 on at

Like (1)

Report

I'd go with what Megan suggested (use an existing role, then remove some privileges if you don't need them). If you still wanted to start from scratch instead, this may also help:

community.dynamics.com/.../minimum-privileges-required-to-login-microsoft-dynamics-365

Was this reply helpful? Yes No
Suggested answer

Community Member on at

Like (0)

Report

Hi crmrsw15,

according to my experience, layered security roles are safer for a complex organization.

Lately, I use always this approach.

I suggest to keep an excel with the following columns to track users, business units, teams 1, 2, 3 roles 1, 2, 3 and then create a routine to associate users, teams, roles.

Hope it helps!

If you found the answer helpful, please mark as Verified

Join my network on LinkedIn Follow me on Twitter

Thank You & Best Regards

Francesco Picchi

Microsoft Dynamics CRM Consultant, Bologna+Milano, ITALY

Independent Contractor

http://www.francescopicchi.com

Was this reply helpful? Yes No
crmrsw15 685 on at

Like (0)

Report

Thanks guys, some great advise here. At least I know where to start now :-)

Was this reply helpful? Yes No