Insufficient Privileges Error when Assigning Account for New User

(0) Share

Report

Posted on by sabbott

125

I am getting the insufficient privileges Error when I try to assign a new user to accounts. We are using CRM 2013 (not hosted or 360 version). He’s assigned to every security role we have including two System Administrator Roles. No other person is having these issues even though several of them are assigned to all of the security roles.

At first I thought it might be a licensing issue (I think we have 10 user licenses and he’s number 11). I’m not sure how to check. I disables two users and the error did not go away.

Any ideas?

*This post is locked for comments

I have the same question (0)

All responses (6)

Answers (0)

Suggested answer

Aileen Gusni 44,524 on at

Like (1)

Report

Hi Sara,

You are using CRM OnPremise? No additional log file?

Check the CAL License in that user, is that still Administrative, change to Read-Write, has it?

Thanks.

Was this reply helpful? Yes No
Sara Abbott 130 on at

Like (0)

Report

Yes, it's CRM On Premise. How do I check the user Cal to see if it's Read-Write?

Here's the error log:

Unhandled Exception: System.ServiceModel.FaultException`1[[Microsoft.Xrm.Sdk.OrganizationServiceFault, Microsoft.Xrm.Sdk, Version=6.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35]]: SecLib::CrmCheckPrivilege failed. Returned hr = -2147220943 on UserId: 5b68ba84-7612-e411-b12e-00505690001c and PrivilegeType: ReadDetail:
<OrganizationServiceFault xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.microsoft.com/xrm/2011/Contracts">
<ErrorCode>-2147220943</ErrorCode>
<ErrorDetails xmlns:d2p1="http://schemas.datacontract.org/2004/07/System.Collections.Generic">
    <KeyValuePairOfstringanyType>
      <d2p1:key>0</d2p1:key>
      <d2p1:value xmlns:d4p1="http://www.w3.org/2001/XMLSchema" i:type="d4p1:string">user</d2p1:value>
    </KeyValuePairOfstringanyType>
</ErrorDetails>
<Message>SecLib::CrmCheckPrivilege failed. Returned hr = -2147220943 on UserId: 5b68ba84-7612-e411-b12e-00505690001c and PrivilegeType: Read</Message>
<Timestamp>2014-10-17T15:12:27.9525077Z</Timestamp>
<InnerFault i:nil="true" />
<TraceText i:nil="true" />
</OrganizationServiceFault>

Was this reply helpful? Yes No
Sara Abbott 130 on at

Like (0)

Report

I noticed if I change my view to "Full Access Users" he's not listed and neither is another one of our employees. Neither of these users can be assigned accounts.

Was this reply helpful? Yes No
Community Member on at

Like (1)

Report

Hi Sara:

You need go to

Settings -->Administration --> Users

click on the user name

Scroll down until you see Client Access License (CAL) Information

Change the status

Hope this helps

_damon

Was this reply helpful? Yes No
Sara Abbott 130 on at

Like (0)

Report

Wow! Thanks so much! That worked! :)

Was this reply helpful? Yes No
Aileen Gusni 44,524 on at

Like (0)

Report

Sara,

CAL License what I am referring to is you go to the User record (through Administration sitemap), and change from Administrative or Read to Read-Write..

Many experienced this issue and usually it was because of no 'Read-Write'

Thanks.

Was this reply helpful? Yes No

Community site session details

Insufficient Privileges Error when Assigning Account for New User

Helpful resources

Quick Links

Responsible AI policies

Neeraj Kumar – Community Spotlight

Congratulations to the November Top 10 Community Leaders!

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

Featured topics

Product updates

Community site session details

Insufficient Privileges Error when Assigning Account for New User

Helpful resources

Quick Links

Responsible AI policies

Neeraj Kumar – Community Spotlight

Congratulations to the November Top 10 Community Leaders!

Subscribe to this forum!

Select categories

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

Featured topics

Product updates