Finance | Project Operations, Human Resources, ...

Cross company delete_from operation is allowed only for admins.

(0) Share

Report

Posted on by saad486

I have a requirement where cross company delete_from (inline) query is being executed. It successfully executes is SysAdmin role and throws the following error "Cross company delete_from operation is allowed only for admins" if I try to execute it from different role.

What can be possible solution from security perspective.

I have the same question (0)

All responses (5)

Answers (0)

Blue Wang on at

Like (0)

Report
HI Saad,

How about your code?

while select crosscompany table_name { while dataArea { changecompany (dataArea.id) { delete_from ... } } }

Was this reply helpful? Yes No
saad486 5 on at

Like (0)

Report
The code I am currently working is in this form
delete_from crosscompany Table1 join .............. ..............

Sadly, I am not allowed to change things on code level, hence restructuring of Query is out of question.

What I am specifically looking for is solution using security privilege, duty or role. I have tried tweaking properties in security privilege like giving table level permission to all the tables involved in this query and it has not worked.

Was this reply helpful? Yes No
Suggested answer

Shashanks 230 on at

Like (0)

Report

Hi saad,

can you try putting you code inside below code and check if it works, It by passes the security permission on the table for the code executing inside.

unchecked(uncheck::TableSecurityPermission)

{}

Hope this helps.Do Let us know if it works.

Regards,

Shashank Shekhar

This post is my own opinion and does not necessarily reflect the opinion or view of my company or Microsoft.
Please mark as verified if the answer is helpful.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

[quote user="Shashanks"]

Hi saad,

can you try putting you code inside below code and check if it works, It by passes the security permission on the table for the code executing inside.

unchecked(uncheck::TableSecurityPermission)

{}

Hope this helps.Do Let us know if it works.

Regards,

Shashank Shekhar

This post is my own opinion and does not necessarily reflect the opinion or view of my company or Microsoft.
Please mark as verified if the answer is helpful.

[/quote]

Hey Shashank,

I have the same issue. Using the unchecked(uncheck::TableSecurityPermission) {} did not resolve the problem, I'm still getting the same error "Cross company delete_from operation is allowed only for admins".

Was this reply helpful? Yes No
Suggested answer

nmaenpaa 101,162 Moderator on at

Like (0)

Report

Well, if the system says that it's only allowed for admins, then it's only allowed for admins. So if a non-admin must run this code, you must run it company per company, not in a single statement. If you wish that Microsoft would allow this functionality for non-admins in the future, you can post an idea on https://ideas.dynamics.com

Was this reply helpful? Yes No