Dynamics Community Forum Thread Details

Missing Views when roles are set in AD Groups

I found an interesting scenario.

We have users in our Dynamics solution, we manage them using Active directory groups as follows

Create an Active directory
Add Active Directory as a Team to dynamics and assign roles to the team
Users in the Team inherit the Team Roles

The above sounds fine however i have seen he following issues

By default when the user is created in dynamics, they are assigned the sales role why?
And this one is a pain in the butt... One of the users created a view, however the view would not appear in the once they created it. Even when using the XRM Tool Box i could not see the views and got the following error

So i gave the user direct permissions and it worked, i can see the views in XRM tool box and the user can now see the views they created.

What am i missing here......

Hi Keliud,

For your two questions:

1.If the sales role you mentioned is sales app access, which is expected by design.

There is a set of default security roles that are assigned to users based on the license and/or solution installed.

(+) Security Roles are automatically assigned to new Users - Microsoft Dynamics CRM Forum Community Forum

2.Check 'Member's privilege inheritance' option of the security role:

Team Privileges Only

Assigned to Team: If a security role with ‘Default – Team Privileges Only’ is assigned to a team, then it’s the same old default behaviour for the team members.
Team members can only create a record with Team as Owner and access records owned by the team.

Direct User (Basic) access level and Team Privileges

Assigned to Team: If a security role with ‘Direct User (Basic) access level and Team Privileges ‘ is assigned to a team, now this is where things get interesting.
With this new feature, team members will be able to create a record that they own and Team as Owner and access records owned by them or their teams.

When a security role with ‘Direct User (Basic) access level and Team Privileges’ is assigned to a team, the team member can create records they own and can access all records they or their team owns.

https://knowledgefrommanish.com/dynamics365/team-members-privilege-inheritance/

Quick Links

Subscribe to this forum!