Skip to main content

Notifications

Announcements

No record found.

Customer experience | Sales, Customer Insights,...
Answered

Missing Privileges to assign users to teams in different Business Units.

(0) ShareShare
ReportReport
Posted on by 30

Hi,

I have 3 BU (1 parent and 2 children) let's call them P1, C1, and C2. I also have a security role that should allow the users with it to assign other users to different teams. Lets call it Super User. Everything works fine when the Super User wants to add a user to a team when they are all in the same BU, but if Super User is in the BU P1 and he tries to add a user in a team from C1 or C2 then I get a permission error. Here are my current permissions:

pastedimage1654197428860v1.png

The error message says that I'm missing the following privileges. My problem is that I can't seem to find them in the security role table so I don't know how I'm supposed to add them. 

Message: VerifyCallerPrivileges failed. To avoid elevation of privileges calling user should have all required privileges.
Calling user (systemuserid=654ca1ac-4530-ec11-b6e6-000d3a09f6b5, UserBU=82d007af-e249-e711-80f2-005056b029f4) attempted action='PreAddMembersChecks' which elevates calling user privileges.
User doesn't have total role privileges count=81, user has 677 privileges in user cache from 4 roles.
First 5 missed role privileges
PrivilegeName(PrivilegeId)/Depth/BusinessUnitId
prvAssignAsyncOperation(003d8a0f-c230-411c-a993-cc0a8aeaac96)/Basic/0f84a718-cf56-ec11-8f8e-000d3af4d98c
prvAppendToQueue(041fdb4c-bbb8-4792-90db-51c19d067ca2)/Local/0f84a718-cf56-ec11-8f8e-000d3af4d98c
prvCreatemsdyn_wallsavedqueryusersettings(07204286-7c41-4ff4-8ec1-c630eff24621)/Basic/0f84a718-cf56-ec11-8f8e-000d3af4d98c
prvAssignmsdyn_wallsavedqueryusersettings(0a9b99f9-c233-4f73-a27d-d710196e4c17)/Basic/0f84a718-cf56-ec11-8f8e-000d3af4d98c
prvAppendToImport(0b43ff39-e162-4a0c-9192-449982cb5830)/Local/0f84a718-cf56-ec11-8f8e-000d3af4d98c

Side note, everything works when I do it as Sys Admin. 

Any advice would be really appreciated. 

  • Iagday Profile Picture
    Iagday 32 on at
    RE: Missing Privileges to assign users to teams in different Business Units.

    Hi Abdul,

    Good answer!

    But is there's a way to get all the privileges missing (in the example above total role privileges count=81)  instead of having only the 5 first one's?

    Otherwise, it's a trial/error pattern (5 at a time).

    Thank you in advance.

  • Verified answer
    Abdul Wahab Profile Picture
    Abdul Wahab 12,077 Super User 2024 Season 1 on at
    RE: Missing Privileges to assign users to teams in different Business Units.

    Hi dev2143,

    Hope you are doing well. This is what you need 

    pastedimage1654227644073v2.png

    I am explaining to you the first one using the below image.

    pastedimage1654228071504v3.png

    For the remaining you can read these: 

    Let me know if I can you more details.

    Thanks

    Regards,

    Power Platform/Customer Engagement Developer/Lead/Solution Architecture/Project Manager

    Direct/WhatsApp:+923323281237

    E-mail: abdulwahabubit@outlook.com

    Skype: abdul.wahabubit

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Congratulations 2024 Spotlight Honorees

Kudos to all of our 2024 community stars! 🎉

Meet the Top 10 leaders for December

Congratulations to our December super stars! 🥳

Start Your Super User Journey

Join the ranks of our community heros! 🦹

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,711 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,458 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans