Customer experience | Sales, Customer Insights,...

How to find missing security permission for a user

(0) Share

Report

Posted on by thartsell

Hi,

I want to know if there is any XRM toolbox or other simple solution I could use to identify missing permissions a user may have when trying to perform a specific task. I had a user that could open the form editor, but when she double clicked on a field to open the field editor box (to see the field name for freemarker use) it gave the error "Insufficient Permissions". The weird thing is there was no way to download a log of the error like other times. I have attached a screenshot of what the error looked like in Chrome and IE. It gave no specifics. I then tried to turn tracing on, but it didn't record any errors for me to pinpoint the missing permission on her security role.

Does anyone have a tool or better way of finding what permissions someone is missing than old fashion trial and error that I can make sure to use in the future for this type of scenario where I cant even download the error details?

It ended up being read only rights on Knowledge Search Model. How would I have even thought that would prevent a user from opening a field when in the form editor?

4336.pastedimage1580180321640v2.png

I have the same question (0)

All responses (3)

Answers (0)

LuHao 40,892 on at

Like (0)

Report

RE: How to find missing security permission for a user

Hi partner,

Unfortunately, there is no such tool.

I would suggest check the 'System Form' permission in the security role.

Please set all permissions for 'System Form' to Organization.

Was this reply helpful? Yes No
thartsell 50 on at

Like (0)

Report

RE: How to find missing security permission for a user

Hi Hao,
Thank you for your help, but I found that the security permission "missing" was for the "Knowledge Search Model" to be set to Organization for the "read" privilege under the Service Management tab. It took hours to trial and error this and makes absolutely no sense as to why this was the permission "needed" as nobody would have thought that was related to being able to view properties of a field on the form layout. There has to be an easier way. Why didn't the trace work? Why didn't I get the option to download details to see the exact permission missing like in the past? I'm sure there are instances where more than one permission needs to be set for a particular task. Instead of spending hours doing trial and error on these things, there should be a way to identify the actual missing permission.

The highlighted permission was the only thing that needed to be changed...

And, all to just be able to do this...

Navigate to the contact form, select form to see the form layout to customize.

Once on the form layout, the task was to be able to open a field (in this example middle name). However, prior to that one permission the user would get that Insufficient privileges error with no details or ability to download details. We just needed them to be able to open the field properties like so.....

Was this reply helpful? Yes No
Suggested answer

Paul_Owen 2,027 on at

Like (0)

Report

RE: How to find missing security permission for a user

Hi, so the user shouldn't be able to customise the form, they are just trying to see the schema name of the field? If so you could try a Chrome Extension called Level Up.

https://chrome.google.com/webstore/detail/level-up-for-dynamics-365/bjnkkhimoaclnddigpphpgkfgeggokam

Regards

Paul

Was this reply helpful? Yes No