Adding security role to a user missing privilege error prvCreateUser

(0) Share

Report

Posted on by Miguel Pereira

Hi!

We are having problems adding security roles to a user.

The user that is executing the action did not have the privilege "prvCreateUser", but he never had and before he can assign the security roles.

Can somebody explain to me why this happens?

Why the user need this privilege?

This is the log of the error:

Message: System.Web.HttpUnhandledException (0x80004005): Exception of type 'System.Web.HttpUnhandledException' was thrown. ---> Microsoft.Crm.CrmException: RoleService::VerifyCallerPrivileges failed. User: fe35d2b1-edff-e911-a812-000d3ab8d3b4, UserBU: 89ed7196-4901-ea11-a811-000d3ab3d5b4, PrivilegeName: prvCreateUser, PrivilegeId: 0a3d4421-af6d-42ed-b3c2-b51deb73d1d5, Depth: Local, BusinessUnitId: 89ed7196-4901-ea11-a811-000d3ab3d5b4, MissingPrivilegeCount: 1

Thx in advance.

I have the same question (0)

All responses (2)

Answers (1)

Suggested answer

Bipin D365 28,983 Moderator on at

Like (0)

Report

Hi,

Strange!

But have you given the create access on User and tried ?

See below article which talks about minimum priv required to manage role

blog.magnetismsolutions.com/.../permissions-required-to-manage-roles-in-dynamics-crm-2011

Please mark my answer verified if i were helpful

Was this reply helpful? Yes No
Verified answer

LuHao 40,892 on at

Like (0)

Report

Hi Miguel,

Since User A cannot assign User B privilege higher than User A has, please check whether the security role assigned to User B by User A contains the creation privileges of the user entity, and User A does not have the creation privileges of the user entity or his privileges is lower than the assigned security role.

Please refer to stackoverflow.com/.../creating-a-security-role-to-be-able-to-only-create-roles-and-users-without-havin

User A must have User entity creation privileges in order for him to assign a security role containing User entity creation privileges to User B, and its permission level cannot exceed User A's.

If User A's User entity creation permission level is Business Unit, then he cannot be assigned to others the Organization level User entity creation permission.

So to solve this problem, make the user have User entity creation privileges as in the security roles he assigned.

Was this reply helpful? Yes No