Delegate security role in dynamics 365

(0) Share

Report

Posted on by Sumaira Noor

1,085

Hello community experts,

There is a requirement where I had to create a user for dynamics 365 and assign delegate security role to that user and the user should be able to login to dynamics 365.

I created the user and assigned delegate security role to him

But I was not able to login to dynamics 365

Every time I logged in it showed Failed to load the application.

I assigned auditor security role for that same user and I was able to login.

But I want to login using delegate security role

Please advise

I'm struggling a lot

Kindly guide

Best regards,

Sumaira Noor

I have the same question (0)

All responses (5)

Answers (1)

Sumaira Noor 1,085 on at

Like (0)

Report

RE: Delegate security role in dynamics 365

Thanks for the help Alok and Wei

Best Regards

Sumaira Noor

Was this reply helpful? Yes No
Suggested answer

Alok Singh 910 on at

Like (0)

Report

RE: Delegate security role in dynamics 365

Hi Sumaira,

Wei Xiong is right that 'Delegate' security can't use independently. User should have assigned a security role with minimum privilege required to login and then on top of that 'Delegate ' security role can be assigned.

It is applicable for Online too

You can refer below blog . it might help you

www.magnetismsolutions.com/.../act-on-behalf-of-another-user

Was this reply helpful? Yes No
Suggested answer

Wei Xiong on at

Like (0)

Report

RE: Delegate security role in dynamics 365

I think this is also applied to online as well.

Was this reply helpful? Yes No
Sumaira Noor 1,085 on at

Like (0)

Report

RE: Delegate security role in dynamics 365

Thanks a lot for the response

Is this role specifically used for dynamics 365 on premise or can be used for online as well?

Kindly advise

Best regards

Sumaria Noor

Was this reply helpful? Yes No

Verified answer

Wei Xiong on at

Like (0)

Report

RE: Delegate security role in dynamics 365

Hi Sumaira Noor,

Delegate Security Role. Microsoft Dynamics CRM includes the Delegate security role. The only privilege in this role is "Act on Behalf of Another User". This role on its own does not provide access to Microsoft Dynamics CRM and must be used in conjunction with another security role.

Impersonation involves two different user accounts: one user account (A) is used when executing code to perform some task on behalf of another user (B).

Required privileges

User account (A) needs the privilege prvActOnBehalfOfAnotherUser, which is included in the Delegate security role.

The actual set of privileges that is used to modify data is the intersection of the privileges that the Delegate role user possesses with that of the user that is being impersonated. In other words, user A is allowed to do something if and only if user A and the impersonated user (B) have the privilege necessary for the action.

Deployment Type	Deployment Type Strategy
On-premises or IFD/Claims	Create a new Dynamics 365 user with a security role which includes the `prvActOnBehalfOfAnotherUser` privilege. Within this security role, also include privileges for the tasks this user account will perform on behalf of other users.