Assignee has insufficient privileges - While Assigning a case to particular User

(0) Share

Report

Posted on by Shubh_K

Hello Experts,

I am getting following error message when I am assigning a case particular User who already has System Admin Security role. I am unable to figure it our why I am getting error message as I am also logged in with System Admin role. This issue is not with other users who also has system admin role.

Please suggest what am I missing here.

Following is the Error Log :-

<s:Envelope xmlns:s="schemas.xmlsoap.org/.../envelope">
    <s:Body>
        <s:Fault>
            <faultcode>s:Client</faultcode>
            <faultstring xml:lang="en-US">SecLib::CrmCheckPrivilege failed. Returned hr = -2147220943 on UserId: 31d96322-03a6-e211-a5cd-bc305befb465 and PrivilegeType: Read</faultstring>
            <detail>
                <OrganizationServiceFault xmlns="schemas.microsoft.com/.../Contracts" xmlns:i="www.w3.org/.../XMLSchema-instance">
                    <ActivityId>d680cacb-2713-4e2d-b7d5-4410f758b832</ActivityId>
                    <ErrorCode>-2147220943</ErrorCode>
                    <ErrorDetails xmlns:a="schemas.datacontract.org/.../System.Collections.Generic" />
                    <Message>SecLib::CrmCheckPrivilege failed. Returned hr = -2147220943 on UserId: 31d96322-03a6-e211-a5cd-bc305befb465 and PrivilegeType: Read</Message>
                    <Timestamp>2018-11-19T08:12:11.8351858Z</Timestamp>
                    <ExceptionRetriable>false</ExceptionRetriable>
                    <ExceptionSource i:nil="true" />
                    <InnerFault>
                        <ActivityId>d680cacb-2713-4e2d-b7d5-4410f758b832</ActivityId>
                        <ErrorCode>-2147220943</ErrorCode>
                        <ErrorDetails xmlns:a="schemas.datacontract.org/.../System.Collections.Generic" />
                        <Message>SecLib::CrmCheckPrivilege failed. Returned hr = -2147220943 on UserId: 31d96322-03a6-e211-a5cd-bc305befb465 and PrivilegeType: Read</Message>
                        <Timestamp>2018-11-19T08:12:11.8351858Z</Timestamp>
                        <ExceptionRetriable>false</ExceptionRetriable>
                        <ExceptionSource i:nil="true" />
                        <InnerFault>
                            <ActivityId>d680cacb-2713-4e2d-b7d5-4410f758b832</ActivityId>
                            <ErrorCode>-2147220960</ErrorCode>
                            <ErrorDetails xmlns:a="schemas.datacontract.org/.../System.Collections.Generic" />
                            <Message>Principal user (Id=31d96322-03a6-e211-a5cd-bc305befb465, type=8) is missing prvReadIncident privilege (Id=c2aff40c-6e68-4437-a631-488a354a1860)</Message>
                            <Timestamp>2018-11-19T08:12:11.8351858Z</Timestamp>
                            <ExceptionRetriable>false</ExceptionRetriable>
                            <ExceptionSource i:nil="true" />
                            <InnerFault i:nil="true" />
                            <OriginalException i:nil="true" />
                            <TraceText i:nil="true" />
                        </InnerFault>
                        <OriginalException i:nil="true" />
                        <TraceText i:nil="true" />
                    </InnerFault>
                    <OriginalException i:nil="true" />
                    <TraceText i:nil="true" />
                </OrganizationServiceFault>
            </detail>
        </s:Fault>
    </s:Body>
</s:Envelope>

576084.Capture.PNG

Thanks

Shubh

*This post is locked for comments

I have the same question (0)

All responses (4)

Answers (1)

Suggested answer

Community Member on at

Like (0)

Report
Hi Shubh,

This usually happens if you have a workflow or a plugin which is triggered as part of the case assignment and that workflow (or plugin) is being run in the context of a user who may not necessarily have the Read privileges on the Case entity or may be disabled.

Can you please try the following.

Login to CRM as a System Administrator

Browse to the following URL after replacing the bits in red accordingly. I have set the Record Id to the user based on the error message, but change it if it is different (the text in green) - https://yourorganizationbaseurl/main.aspx?etc=8&extraqs=id=%7b31d96322-03a6-e211-a5cd-bc305befb465%7d&pagetype=entityrecord. If the above URL doesn't work, try this https://yourorganizationbaseurl/api/data/v8.2/systemusers(31d96322-03a6-e211-a5cd-bc305befb465)

Check what permissions the record you opened in step 2 has. Ensure that it has Read privileges to Incident entity.

Verify that you do not have any workflows which are triggered when a case is assigned.

If you do have workflows running, check what permissions the user under whose identity the workflow runs and that it is not a disabled user.

Try disabling the workflow and see if the assignment works.

Verify that you do not have any plugins which are triggered when a case is assigned.

If you do have workflows running, check what permissions the user under whose identity the workflow runs and that it is not a disabled user.

Try disabling the plugin and see if the assignment works.

Hope this helps.

- Sara

Was this reply helpful? Yes No
Suggested answer

Alex Fun Wei Jie 33,628 on at

Like (0)

Report

Hi,

first identify who is this "UserId: 31d96322-03a6-e211-a5cd-bc305befb465" <---.

I believed the user the selected during assign proceed does not have privilege to read the incident (case).

Was this reply helpful? Yes No
Verified answer

a33ik 84,331 Most Valuable Professional on at

Like (1)

Report

Hello,

I saw similar issue and it was related to user's Access Mode. Doublecheck that user has Read-Write access mode and not either Non-Interactive or Administrative.

Was this reply helpful? Yes No
Shubh_K 80 on at

Like (0)

Report

Thanks Andrew Butenko.

Was this reply helpful? Yes No