So something seems to be weird with our CRM Security. I can't really tell how long it has been this way, because I think there are two processes which I do not own. Today I tried to activate one of those two and Got an error saying I lacked the prvCreateProcess Role. I checked and I am a System Administrator, System Customizer and have the CEO-Business Manager Role.
This is a little odd. Not hyper critical, but I am concerned there may be something else wrong that is somewhat hidden. Can this type of behavior be explained or is it indicative of some issue?
*This post is locked for comments
Thanks for the link. I'll give it a read.
It's how it is. It is how it is supposed to be acting. There is nothing wrong.
Background / What you might expect:
Create Process privilege is separate to the Assign and Write (includes deactivate) privileges. You can check the privileges for the Security Roles under the Customization tab > Process. OOTB Systems Customizer has full privileges on Process, Process Configuration but only User level Create/Write/Assign on Process Session. Systems Admin should normally be able to do everything.
HOWEVER:
For workflows (and as if it sounds it acts exactly the same for Processes) there are some restrictions about who can do what - that override this OOTB approach to privileges.
Please refer to this excellent blog by Gonzalo Ruiz: gonzaloruizcrm.blogspot.com.au/.../processesworkflow-ownership-faqs.html
Some extracts that directly respond to your questions:
Qn: Why can’t I activate/deactivate someone else’s workflow, even if I am the system administrator?
Ans: You want the workflow owner to explicitly acknowledge that a workflow will be activated and will perform some actions on his behalf. You would not want to allow another user (even the system administrator) to decide that some process should be executed on another user’s behalf. If you want to activate/deactivate someone else’s process you must first assign it to yourself.
If I assign an activated process to another user, why does the user have to re-activate it?
Ans: Active processes cannot be modified so the system automatically deactivates them before assigning it to the new user. As per Q3 above, only the new owner will be able to re-activate the process.
André Arnaud de Cal...
291,965
Super User 2025 Season 1
Martin Dráb
230,836
Most Valuable Professional
nmaenpaa
101,156