Microsoft Dynamics CRM (Archived)

What are the privileges required for a user whose only function is to create new users

(0) Share

Report

Posted on by Community Member

Hi,

I have setup a crm user (Service Desk) with Access Mode = Administrative.

I want to create a new Security Role that will enable this user to have only the privileges required to

- Create a New User

- Assign Business Unit

- Assign Security role

This user must not have access to any other part in the 'Settings' section. For example I don't this user to access the Settings - Administration - Security Roles or Business Units or Teams or System Settings. Or any other area under the Settings.

Kindly advise.

Many thanks

Gideon

*This post is locked for comments

I have the same question (0)

All responses (4)

Answers (2)

Verified answer

Hosk on at

Like (3)

Report

RE: What are the privileges required for a user whose only function is to create new users

when you create security roles it's a lot of trial and error and smoothing out the security priviledges until you get it right.

as the new users need so few security priviledges

then I would create a new security role and give him security roles on the business management tab and select the relevant privildges.

Business unit

User

security role

send invitation

There may be other entities you need to set append or append to priviledges. It will be a bit of trial and error until you get it right

Was this reply helpful? Yes No
Verified answer

Royal King 27,686 on at

Like (0)

Report
RE: What are the privileges required for a user whose only function is to create new users

Assign system administrator role with Access mode : Administrative and License type : Administrative. Administrative access mode is specifically designed for administrative work like add new users, reassign roles and changing business unit of an user account. When user's access mode is Administrative he can't access Business data of the system. I mean can't see any data that exists in the system but he can do all administrative tasks like assigning new role,creating new user . This user does not consume any License.

ADMINISTRATIVE USERS
Microsoft Dynamics CRM Server 2011 allows for up to two separate devices or users to access instances of the
server software only to administer those instances, which do not consume CALs.

By default, all Office 365 Global administrators and Office 365 Service administrators who do not have a Microsoft Dynamics CRM Online license are granted the following two levels of permission in Microsoft Dynamics CRM Online.

System Administrator security role

Administrative access mode

Was this reply helpful? Yes No
Suggested answer

ScottDurow 21 on at

Like (1)

Report

RE: What are the privileges required for a user whose only function is to create new users

Hi,

The issue is that a user cannot grant a user more right that they have themselves - so if a user does not have the 'Administrator' role then they will only be able to create users with a set of roles that give them equal or lower access to CRM than their own roles. This makes sense otherwise a user would be able to grant their own access to more data than they originally had access to.

Using the Administrator access mode as Chitra suggests get's around this.

Hope this helps,

Scott

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

RE: What are the privileges required for a user whose only function is to create new users

Yes, that was what I suspected that I will need to give System Administrator Role (Access Mode = Administrative) to the users.

Thank you very much Ben, Chitra and Scott for taking time to comment.

Gideon

Was this reply helpful? Yes No