web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

Community site session details

Community site session details

Session Id :
Microsoft Dynamics CRM (Archived)

How do I determine security role privilege effects in CRM online

(0) ShareShare
ReportReport
Posted on by

I need to be able to troubleshoot or determine CRM 2011 Online security role privilege's. We always start with standard roles, copy them and then customize. However when we cant figure out why some particular effect (run workflow, edit templates, customize picklist, etc.) works or doesnt work the only option is to spend hours turning on and off different privilges for a test user in the different modules and retrying it from the user perspective until we find the golden egg!

This is about the same as haveing car engine trouble and just replaceing part after part becasue you dont have a clue as to what part is defective.

Microsoft support has not been able to provide any additional assistance.

There has to be some log or process or troubleshooting steps to determine what additional privilege is required for the specific record-level or task-based privileges.

 

Thank you

 

*This post is locked for comments

I have the same question (0)
  • Community Member Profile Picture
    on at

    In time you will better understand all the different principles of security roles. I myself had problem in the beginning and doing it this way. In time when you master all the different aspects, you will see that it's easier to config security roles. I agree that it's not always easy. Most of the issues are related to be too restrictive with the append and the append to.

  • Suggested answer
    Brian Storie Profile Picture
    on at

    Hello Kevin,

    When a user doesn't have permission to perform an action in CRM it is logged in the Server trace files. With an on Premise CRM server, you can enable tracing, view the trace file and it will tell you what Privilege is missing, for example, "user Guid value is missing prvReadContact".

    If the use has the permission, but it isn't high enough,such as set at user level, but need to be business unit level,  the trace files will not specifically tell you with permission is missing.  However it will show a LibCheckAccess call in the Stack trace, and tell you with permission type it was trying to access. This is usually Append or Append To.

    This is true of CRM 2011 Online as well, however the trace files are not publicly available. In order see what permission is being misssing in the Trace files, you would need to open a Support Request with us.   From there we are work with you to review the Trace Files and help determine which exact Role/permission you are missing.

    If you do not want to open a Support Request, then the next best methods to help determine what you are missing, is to ask the question, "What entities/relationships am/could I be working with, and at what Level?"

    This will help you to narrow it done to the specific Entities and their permission Levels Need to be at.

    I hope this helps answer your question.

    Best Regards,

    Brian Storie

    CRM Support Engineer

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
SA-08121319-0 Profile Picture

SA-08121319-0 4

#1
Calum MacFarlane Profile Picture

Calum MacFarlane 4

#3
Alex Fun Wei Jie Profile Picture

Alex Fun Wei Jie 2

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans