Regarding Security Roles in MS Dynamics

(0) Share

Report

Posted on by Community Member

Hi,

We need to assign security role to the user to match the below conditions,

• Reopening Opportunities and amending data when requested (and approved by CRM Mgr)
• Setting up email workflows
• Deleting records

Which is the appropriate role in Dynamics CRM that we can assign.

Thanks.

*This post is locked for comments

I have the same question (0)

All responses (2)

Answers (0)

Sort by

Suggested answer

Rawish Kumar 13,758 on at

Like (0)

Report
Copy link

Link copied!

Hi Akhila,

These looks very much admin tasks to me. You can assign admin role or also check if System Customizer should suffice.

However the security is controled mainly what permissions are given within security role.

for example

1. Re-open opportunity - if you open a security role and go to core records - see if you have full permission on the opportunity entity

2. workflow - look in the miscellaneous privilges and given option for creating workflows.

3. deleting record - on the entities the last privilge says "delete" that controls current role can delete or not.

moral of the story - see if you can afford a system admin/system customizer role , otherwise create a new role by copying sys admin role and modify it for your need. https://docs.microsoft.com/en-us/dynamics365/customer-engagement/admin/copy-security-role by default this role will have everythig , all you have to do is remove what you dont need.

Was this reply helpful? Yes No
David Jennaway 14,065 on at

Like (0)

Report
Copy link

Link copied!
Note that there is no specific permission to be able to reopen an opportunity; if a user has permission to update an opportunity, then this also allows them to change the status. If you did need to restrict this (i.e. allow a user to not be able to reopen an opportunity, but to be able to update open opportunities, then there are a few options, but none of them that easy:

You could write a plugin that would selectively prevent a change of status based on the user or their role

You could assign all closed opportunities to a user/team in a separate business unit, and not allow most users Update permissions on opportunities outside of their BU. However, this could affect any reporting on opportunities

You could maybe modify the ribbon buttons to limit who can use the button to reopen the opportunity

Was this reply helpful? Yes No