How do I set privileges?

(0) Share

Report

Posted on by Community Member

Hi there,

I'm currently working on getting the proper privileges in order to query a wide range of data from different entities. I am able to get the entities through the /EntityDefinitions endpoint, but when I try to access /accounts and /contacts and I get the error that the Principal user is missing prvReadContact privilege (or prvReadAccount). I found this resource which shows the different privileges but I can't figure where I set this up. I have given myself full access when creating the app (in portal.azure.com > Azure Active Directory > App registrations and in the Settings > Required Permissions, where I gave myself full permissions to the different APIs and then said 'Grant Permissions') but I'm not sure if this is relevant, since I haven't seen anything about these different privilege codes in there.

I want to be able to set myself up for full read access with all privileges, but am not sure how to do so. Any advice would be greatly appreciated.

*This post is locked for comments

I have the same question (0)

All responses (5)

Answers (3)

Verified answer

Wayne Walton 13,730 on at

Like (1)

Report

The user you're using as a connection account needs a CRM Security Role. If they need access to everything, System Administrator is the right security role. Otherwise, you can make a custom one that gives you read permissions to the entities you want to look at. I forget exactly where that is in CRM 4.0, but it will be something like Settings -> Users or Settings -> Security.

What you do in Azure AD doesn't matter, it's exclusively the domain of internal CRM security.

Was this reply helpful? Yes No
Verified answer

gdas 50,091 Moderator on at

Like (1)

Report

Hello Dallas,

I am not sure which role user has been assigned , is it system Admin or custom one ?

Am pretty much sure this is related to security roles which assigned user , try to login system admin role and check everything is working or not.

Below highlighted privileges should be checked for user assigned security roles . Hope this helps.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Thank you for the suggestion and information! I got the owner of the main account to go in and check roles and my account has a Global administrator role...any idea what extra step needs to be taken in order to access?

Was this reply helpful? Yes No
Verified answer

Arpit Shrivastava 7,518 User Group Leader on at

Like (1)

Report

Hey Dallas,

In one of our scenarios we noticed that even after the user was assigned the ‘System Administrator’ security role, we were receiving the above error. Further investigation led to the discovery that the user was not given the read-write permissions. This could be done through the read-write access mode.

Let’s take a look below article. Hope it helps:

https://community.dynamics.com/crm/b/crminogic/archive/2016/02/19/error-principal-user-is-missing-prvreadaccount-privilege-resolved

If my answer helped to resolve your issue, kindly verify it by clicking 'Yes'. It would be helpful to the other community members seeking to resolve a similar issue.

Cheers
Arpit
https://arpitmscrmhunt.blogspot.in

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Thanks everyone for the help! All super helpful and helped me get to the answer. I ended up having the correct permissions to begin with (Global administrator) so the article Arpit sent had the information I needed (re: product licenses).

Was this reply helpful? Yes No