Dynamics Community Forum Thread Details

Access is denied when submitting a time entry

I am testing time entries for a basic user within my sandbox environment. I need the user to be able to submit a time entry related to a project and task. I have given them all user permissions to add time entries but when i go to submit the time entry this message pops up -

You do not have enough privileges to access the Microsoft Dynamics 365 object or perform the requested operation. For more information, contact your Microsoft Dynamics 365 administrator.

I am asking for the specific permission (not a role that includes it) to submit a time entry. This is the extended error message -

Exception Message: Principal with id a24ee227-3fd8-ed11-a7c7-000d3ab1f7e2 does not have AppendToAccess right(s) for record with id 669f5ee0-0075-4aa6-863a-af5deb3a3ea4 of entity msdyn_project. Details: {"CallerPrincipal":{"PrincipalId":"a24ee227-3fd8-ed11-a7c7-000d3ab1f7e2","Type":8,"IsUserPrincipal":true},"OwnerPrincipal":{"PrincipalId":"e747398e-e7bd-ed11-9886-0022489ca65c","Type":8,"IsUserPrincipal":true},"ObjectId":"669f5ee0-0075-4aa6-863a-af5deb3a3ea4","ObjectTypeCode":10756,"EntityName":"msdyn_project","ObjectBusinessUnitId":"ea40398e-e7bd-ed11-9886-0022489ca65c","RightsToCheck":"AppendToAccess","RoleAccessRights":"None","PoaAccessRights":"ReadAccess, WriteAccess","HsmAccessRights":"None","GrantedAccessRights":"ReadAccess, WriteAccess","Messages":["BasicMinimumPrivilegeDepthRequired = None","EntityUserGroupRights = None","LocalMinimumPrivilegeDepthRequiredRights = AppendToAccess","SecLib::AccessCheckEx2 failed. Owner Data: roleCount=24, privilegeCount=7793, accessMode=0; Principal Data: roleCount=4, privilegeCount=696, accessMode=0"],"EntityOwnershipTypeMask":1,"CallerInfo":{"IsSystemUser":false,"IsSupportUser":false,"IsAdministrator":false,"IsCustomizer":false,"IsDisabled":false,"IsIntegrationUser":false,"Teams":null,"Roles":null},"ReadOnlyState":"UserAndOrgFullAccess","IsHsmEnabled":false,"HsmInfo":null,"AccessOrigin":null}

ErrorCode: -2147187962
HexErrorCode: 0x80048306

ErrorDetails:
0: msdyn_project
1: 669f5ee0-0075-4aa6-863a-af5deb3a3ea4
2: 10756
3: AppendToAccess
4: a24ee227-3fd8-ed11-a7c7-000d3ab1f7e2
5: 8
ApiExceptionSourceKey: Plugin/Microsoft.Crm.ObjectModel.CustomBusinessEntityService
ApiStepKey: 73b234e7-2bbe-ed11-9886-0022489ca65c
ApiDepthKey: 1
ApiActivityIdKey: 05376d3c-e2db-492f-8a26-9e85d795423e
ApiPluginSolutionNameKey: System
ApiStepSolutionNameKey: System
ApiExceptionCategory: ClientError
ApiExceptionMessageName: unManagedIdsAccessDenied
ApiExceptionHttpStatusCode: 403

Any help relating to the permission i need to add to this role would be appreciated.

Thanks.

Hello!

It looks like you cannot Append to the table Project as per the error message: Principal with id a24ee227-3fd8-ed11-a7c7-000d3ab1f7e2 does not have AppendToAccess right(s) for record with id 669f5ee0-0075-4aa6-863a-af5deb3a3ea4 of entity msdyn_project.

When you use a lookup field, you need the Append or Append to access said table in order to be able to Save the record. So, that should be the culprit here.

To fix it: Navigate to the Security Role that this user has (normally more than one) and grant it Organization access append and append to the table: Project (msdyn_project).