Skip to main content

Notifications

Microsoft Dynamics CRM (Archived)

Record based security

Posted on by Microsoft Employee

Hi,

There is entity lets say called "Entity A".

I created two forms for this entity: "Form A" and "Form B"

Made a security role and define the security that the "Form B" can be seen/edited only with this security role.

It works because only users with this security role can see "Form B" and switch between "Form A" and "Form B". Other users can see "Form A" only.

The problem is that if user with necessary security role open "Form B" and creates a record, the record is visible for everyone who has an access to an entity.

I need that the records would be visible for the users with the security role only.

*This post is locked for comments

  • Suggested answer
    Mahendar Pal Profile Picture
    Mahendar Pal 45,095 on at
    RE: Record based security

    Form level security just controls the visibility of the form, user will be able to access data if he has right permissions even though he don't have access to particular entity form which was used to create entity record. Please revisit security roles permissions and set them accordingly, you can refer KB suggested by other users.

  • Suggested answer
    RaviKashyap Profile Picture
    RaviKashyap 55,410 on at
    RE: Record based security

    The security option is for the the form i.e. which form to be visible to which security role. To restrict the data, you need to update the security role itself andchange the entity permission to user level.

    Refer this:

    crmbook.powerobjects.com/.../security-roles

    Hope this helps.

  • Suggested answer
    gdas Profile Picture
    gdas 50,085 on at
    RE: Record based security

    Hi ,

    if you apply security role in the form that means only it will enable the form not  the record. As per your requirement I believe you can achieve this functionality with entity type - there is three type of entity Organization Owned , Business Owned , User or Team Owned .

    So you need to have your entity user or team owned by using that the record can be owned by the user or multiple user or team. So here is the following step you need to do to achieve this

    Step1- Create entity as user or team owned  make sure we need to define at the time of creation.

    Step2- Create security role having the entity Read privileges with  user level access.

    Step3- The step you followed already for your form .

    Hope this helps.

  • Verified answer
    Michel van den Brink Profile Picture
    Michel van den Brink 4,697 on at
    RE: Record based security

    Hello,

    Security on Forms is only a user interface limitation, it doesn't actually secure data.

    You would have to use the User/Team level of permissions on the entity itself for this or use Access Teams.

      

    1. If your entity is set to User/Team, you can restrict access to records in a Security Role to only allow the owner or team in which the owner resides, or the business unit in which the owner resides, access to the record.

      More about entities on User/Team entities:
      https://docs.microsoft.com/en-us/dynamics365/customer-engagement/developer/user-team-entities
      And about teams:
      https://docs.microsoft.com/en-us/dynamics365/customer-engagement/admin/manage-teams 

    2. Access Teams allow you to to ad-hoc change who has access to a specific record by allowing you to specifically add/remove users from a record.

      More about teams:
      https://docs.microsoft.com/en-us/dynamics365/customer-engagement/developer/use-access-teams-owner-teams-collaborate-share-information 

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

December Spotlight Star - Muhammad Affan

Congratulations to a top community star!

Top 10 leaders for November!

Congratulations to our November super stars!

Tips for Writing Effective Suggested Answers

Best practices for providing successful forum answers ✍️

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,253 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,188 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans