Microsoft Dynamics CRM (Archived)

Security Role to Manage User Access in CRM 2011 OnPremises

(0) Share

Report

Posted on by Roopa

295

Hi Folks,

I have a requirement of providing a role called Service Desk where they should only able to do the below activities

1. Create New User

2. Update Existing User Details

3. Assign Security Role

4. Assign Field Security Profiles

I created new role and for that i had provided access related to user access like User, BU,Security Roles and others. and i started testing it.

I could able to create user ,but while assigning role i was keep on getting the errors. one by one i solved by addressing the missing privileges.

Later the it was showing error like Create Account,Create Activity etc privileges are missing.

Anyone has any idea how to rectify this? is this possible to provide access to only for service desk activities like mentioned above??

TIA

*This post is locked for comments

I have the same question (0)

All responses (5)

Answers (0)

Suggested answer

Community Member on at

Like (1)

Report

You need to change the user's Access Mode to 'Administrative'. This will give them permissions for user administration but restricts their access to other areas of CRM such as Sales and Marketing.
I hope this helps.

Please remember to mark answers as verified if a member of the community helps you.

Was this reply helpful? Yes No
Suggested answer

PS 23,577 on at

Like (1)

Report

Hi Roopa,

You need to go to>>user form>>Under Administrative tab>>Change Access Mode>>To Administration from Read-write; screenshot below

Following privileges are required if user wants to create 'users' in the system:

Was this reply helpful? Yes No
Roopa 295 on at

Like (0)

Report

Thanks for the response.

I tried by changing the access mode to administrative. while testing i found that the user can update the entities,publish the entities as well. in my case it should not allow except User License Creation.

Was this reply helpful? Yes No
Suggested answer

Community Member on at

Like (0)

Report

Hi Roopa,

A user cannot grant privileges that they do not already have themselves. For example, if a user with the Service Desk role will be assigning the 'Salesperson' role to other users, the Service Desk user must already have the 'Salesperson' role. And if those roles have permissions to create accounts, etc then the Service Desk will too. I don't think there is a way around this.

In regards to your last comment, it looks like your user is inheriting the 'Publish Customizations' permission (on the Customization tab). It could be from one of the security roles in a Team or Business Unit to which your user belongs.

If you just want a role that has the ability to create and update user detail (and leaves the sucurity role assignment to an administrator) you can use the role below. We give this role to department managers so that they can create their own users. A workflow notifies the admin team, who then assign security roles.

Start with a new (blank) role and add the following.

Note: if you have any custom entities on the user form, you will need to add read and append to permissions.

I really hope this helps.

Was this reply helpful? Yes No
Suggested answer

Aditya_Patil 346 on at

Like (0)

Report

Hi Roopa,

It seems your user belongs to any other team which has security privileges related to Accounts, Activities etc.

Or if your role is copied from any other role then remove unnecessary privileges and grant privileges related to User, Queues and customization area.

Thanks,

Aditya

Please vote if this answer is helpful to solve your query which will help other in future

Was this reply helpful? Yes No