Security Role Issues

(0) Share

Report

Posted on by LCRMAdminG

335

So I am trying to lock down some security roles in my org. I used the "Your User Security - Magnified" tool via XRM toolbox to figure out how a user is changing things he shouldn't have permission to do. I got the below image when I looked at his record.

But in CRM it shows he doesn't have admin access....

I checked XRM ToolBox and it shows all my users as having admin access. Is this correct? And if so, how do I remedy it, if I can't "uncheck" that box in CRM?

*This post is locked for comments

I have the same question (0)

All responses (6)

Answers (2)

Sort by

Verified answer

ashlega 34,477 on at

Like (0)

Report
Copy link

Link copied!

See if you've accidentally granted system admin to one of the teams those users are members of (have a look at the default BU team, in particular)

Was this reply helpful? Yes No
LCRMAdminG 335 on at

Like (0)

Report
Copy link

Link copied!

Yes, I was thinking something like this. How do I check team roles?

Was this reply helpful? Yes No
LCRMAdminG 335 on at

Like (0)

Report
Copy link

Link copied!

Nevermind, I found it! YES THAT IS WHERE IT WAS! THANK YOU!

Was this reply helpful? Yes No
Verified answer

Community Member on at

Like (0)

Report
Copy link

Link copied!

Hi ToniG ,

probably your user is a member of a Team which hold an administrative role.

Check it and let me know.

If you found the answer helpful, please mark as Verified

Join my network on LinkedIn Follow me on Twitter

Thank You & Best Regards

Francesco Picchi

Microsoft Dynamics CRM Consultant, Bologna, ITALY

Independent Contractor

http://www.francescopicchi.com

Was this reply helpful? Yes No
LCRMAdminG 335 on at

Like (0)

Report
Copy link

Link copied!

So I did find that the only team we have, that was built by our former partner had system admin access. So I gave it base access assuming that other roles would build on top of that, but that does not seem to be the case. Unless the base role has the security right, I cannot do basic things (like create an opportunity) even if I have sysadmin rights. Does the team security role override individual roles? If so, how do I turn that off? (Does everyone need to be on a team at all?)

Was this reply helpful? Yes No
ashlega 34,477 on at

Like (0)

Report
Copy link

Link copied!

Hi Toni,

Security roles are cumulative - so if you have a sys admin role you should've access to everything. There can be occasional quirks if the system has been customized, but, in general, sys admins don't really need any other roles. Are you certain your base roles has enough permissions to let non sys-admin users do what they need to do? If not, maybe you did not assign other roles to those users? As for the sys admin, could you post a screenshot and a bit more details about what's not working?

Was this reply helpful? Yes No