Security Role Permissions to Create Users and assign security roles to users

(0) Share

Report

Posted on by RolfC

Hello,

we have the requirement to give a security role, that is not the System Administrator, the permissions to create new users and assign security roles to users. I've added the appropriate permissions (read, create, assign (To)) to the user, security role, business unit, etc.. But in the User page I'dont have the option to create a new user or to assign a security role to an user.

What permissions are necessary for that or is it only possible for System Administrators to do that.

Thank you

Regards

Rolf

*This post is locked for comments

I have the same question (0)

All responses (12)

Answers (0)

Suggested answer

Aldo Macedo on at

Like (0)

Report

RE: Security Role Permissions to Create Users and assign security roles to users

Hello Rolf,

You can find privileges needed to manage users in

Security>Security Roles

Business Management > Users, Users settings, Team and Security roles

If it is for CRM Online you only can create and manage users in O365

If it is for CRM On premise you should manage users in AD to visualize them in CRM, user should have permission to AD to manage users in CRM

References:

technet.microsoft.com/.../dn531106.aspx

technet.microsoft.com/.../jj191623.aspx

technet.microsoft.com/.../dn531059.aspx

www.microsoft.com/.../add-and-manage-users-and-set-security-roles.aspx

rc.crm.dynamics.com/.../ug_org_ManagingUsers.htm

msdn.microsoft.com/.../gg328485.aspx

Best regards,

Was this reply helpful? Yes No
RolfC 5 on at

Like (0)

Report

RE: Security Role Permissions to Create Users and assign security roles to users

Thank you for your answer Aldo,

I've already tried your suggestions. My question is. What minimal rights does a user need to create users and assign Security Roles to the users.

Is there a set of such permissions or rights or must that user be a member of the System Administrator group. I didn't find a clear statement or information about that.

Best Regards

Rolf

Was this reply helpful? Yes No
Suggested answer

Aldo Macedo on at

Like (1)

Report

RE: Security Role Permissions to Create Users and assign security roles to users

Hello Rolf

User must be a member of System Administrator group to manage users and security roles in CRM, there is no role with required permissions as System Administrator to manage users and their security roles in CRM.

It will be similar in CRM Online global administrator or user managemente (limited) can manage users licenses, but security roles can be managed in CRM Online with proper permissions.

Best regards,

Was this reply helpful? Yes No
Archer Mehrab 186 on at

Like (2)

Report

RE: Security Role Permissions to Create Users and assign security roles to users

thanks for the interesting Topic and Explanation , but still I did not get the answer to Rolf Question , I am putting his question in different Wording , which might make more sense

if we want to have the limited version of Administration Security role for a user in Dynamic CRM , what would be the minimum privileges needs to be provide which user could perform enabling / disabling of the users and assigning the security roles to the different users

this might be a case for the big organization which might have lots of Onboarding or Leaving of the user from the Organization and they might to have some one with minimum knowledge of the Dynamic CRM to perform this roles

Was this reply helpful? Yes No
Suggested answer

Community Member on at

Like (0)

Report

RE: Security Role Permissions to Create Users and assign security roles to users

I had the same question this morning and found the following answer: www.magnetismsolutions.com/.../permissions-required-to-manage-roles-in-dynamics-crm-2011

Was this reply helpful? Yes No
Roxana 691 on at

Like (0)

Report

RE: Security Role Permissions to Create Users and assign security roles to users

Hello,

May you help with the permissions you set?

I added a "new role", it can créate users, but can not assign roles. I have followed the article: http://www.magnetismsolutions.com/blog/paulnieuwelaar/2013/04/22/permissions-required-to-manage-roles-in-dynamics-crm-2011, but doesnt work.

My scenario: CRM 2016. On.Premise

1-User: "User-Role Admin"; Roles: "New Roles" and "Sales Manager Role"

2-User "John": Does not have any Role.

3-"User Role Amin" wants to add "John" to "Sales Manager Role", but errors: of missing permissions pop up.

Please your kind help.

Was this reply helpful? Yes No
Suggested answer

PS 23,577 on at

Like (0)

Report

RE: Security Role Permissions to Create Users and assign security roles to users

Also provide append & append to, privileges under security, Business Management tab

Was this reply helpful? Yes No
Suggested answer

PS 23,577 on at

Like (2)

Report

RE: Security Role Permissions to Create Users and assign security roles to users

blogs.msdn.microsoft.com/.../how-to-make-a-custom-administrator-security-role-in-crm-2011-on-premise

technet.microsoft.com/.../dn531106.aspx

Follow the URLs

Was this reply helpful? Yes No
Suggested answer

Roxana 691 on at

Like (3)

Report

RE: Security Role Permissions to Create Users and assign security roles to users

Hello Prashant.

Your answer is the right one:

-The user was added with the Type License: Administrative; Access Mode: Administrative; Security Role added: System user.

The user can add new users and assign roles, as well as she can not see options in sales, marketing and service, except the "Knowledge Base".

Thank you very much for your kind time and help.

Best regards.

Roxana

Was this reply helpful? Yes No
Roxana 691 on at

Like (0)

Report

RE: Security Role Permissions to Create Users and assign security roles to users

Hello Prashant.

After more tests with:

--Type License: Administrative; Access Mode: Administrative; Security Role added: --System user.

We have realized the following:

1-In the User´s screen (entity) can not update the "Lookup Custom Fields", they are disabled.

2-The user can not change TO the Access Mode: Read OR Administrative, because the following message shows up:

"You need to have system administrator role and access mode Full to change access mode of a user."

So these 2 restrictions have been found with the user "Access: Administrative; Role: System User".

Any advice with this I will appreciate.

Thanks!

Was this reply helpful? Yes No