web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

Community site session details

Community site session details

Session Id :
Microsoft Dynamics CRM (Archived)

Insufficient Permissions - "Show Details" provides no help!

(0) ShareShare
ReportReport
Posted on by 65

Hi All,

So I've setup a custom entity with a lookup field to users. It works absolutely fine for system admin users but anyone else gets an "Insufficient Permissions" error saying "You do not have {0} permission to access {1} records. Contact your Microsoft Dynamics 365 administrator for help.".

I've read various forms and articles suggesting the "more details" output will tell me what privileges are missing but the error output I'm getting doesn't seem to contain what most of the forms are suggesting:

   at Microsoft.Crm.Extensibility.OrganizationSdkServiceInternal.CreateInternal(Entity entity, InvocationContext invocationContext, CallerOriginToken callerOriginToken, WebServiceType serviceType, Boolean checkAdminMode, Dictionary`2 optionalParameters)
   at Microsoft.Crm.Extensibility.OData.CrmODataExecutionContext.CreateOrganizationResponse(Entity entity)
   at Microsoft.Crm.Extensibility.OData.CrmODataServiceDataProvider.CreateEdmEntity(CrmODataExecutionContext context, String edmEntityName, EdmEntityObject entityObject, Boolean isUpsert)
   at Microsoft.Crm.Extensibility.OData.EntityController.PostEntitySetImplementation(String& entitySetName, EdmEntityObject entityObject)
   at Microsoft.PowerApps.CoreFramework.ActivityLoggerExtensions.Execute[TResult](ILogger logger, EventId eventId, ActivityType activityType, Func`1 func, IEnumerable`1 additionalCustomProperties)
   at Microsoft.Xrm.Telemetry.XrmTelemetryExtensions.Execute[TResult](ILogger logger, XrmTelemetryActivityType activityType, Func`1 func)
   at lambda_method(Closure , Object , Object[] )
   at System.Web.Http.Controllers.ReflectedHttpActionDescriptor.ActionExecutor.<>c__DisplayClass10.<GetExecutor>b__9(Object instance, Object[] methodParameters)
   at System.Web.Http.Controllers.ReflectedHttpActionDescriptor.ExecuteAsync(HttpControllerContext controllerContext, IDictionary`2 arguments, CancellationToken cancellationToken)
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Web.Http.Controllers.ApiControllerActionInvoker.<InvokeActionAsyncCore>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Web.Http.Controllers.ActionFilterResult.<ExecuteAsync>d__2.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
   at System.Web.Http.Dispatcher.HttpControllerDispatcher.<SendAsync>d__1.MoveNext()
Activity Id: 41046aa2-70ee-4a29-99dd-91455c808d65


Does anyone have any idea what might be the problem?

*This post is locked for comments

I have the same question (0)
  • drewt Profile Picture
    15 on at

    Hello dvn92

    If you have a lookup then you will also have a relationship 1:N probably, so it you open your custom entity in customizations and look at 1:N relationships you can see the entity that is related to is User Entity Instance Data.  Now go to settings / security / security roles and select the role of your the users that cannot use the lookup for example salesperson.  Click on the core records tab and scroll down until you see the User Entity Instance Data and you will see that it is set to User - which means only the user who owns the record can see it.  So change the read to organization by clicking on it and see if that helps.

  • Suggested answer
    Dynamics Objects 365 Profile Picture
    550 on at

    Hi,

    Are you using UCI?

    If yes, then try the same thing in classic interface. You will able to see More Details in classic interface.

  • Suggested answer
    Deb3107 Profile Picture
    2 on at

    This was an amazing bit of advice! UCI is obviously still evolving and I have literally been stuck for 2 hours trying to figure out where the issue with permissions was.  Allowing me to enter data via the classic experience pin pointed the issue right away. Big thumbs up from me!

  • Suggested answer
    Kokulan Profile Picture
    18,054 on at

    Hi

    I think your permission error is due to the user who is trying to set the lookup field vaue on the Contact does not have AppendTo permission on the user entity or Append permission on the Contact entity.

    Please see below how how this works : A user must have “Append” permissions on Contact and Append To permissions on User.  

  • Martin Donnelly Profile Picture
    1,030 on at

    Can anyone tell me how to revert one back to classic experience?

  • drewt Profile Picture
    15 on at

    community.dynamics.com/.../how-to-change-dynamics-365-crm-web-interface-from-uci-to-classic-version

    CRMOrgName.Region.dynamics.com/main.aspx?forceClassic=1

  • Martin Donnelly Profile Picture
    1,030 on at

    Thanks!

    However, Microsoft manages to blunt this solution for me :-;

    community.dynamics.com/.../984827

  • Edson Nunes Profile Picture
    5 on at

    Perfeito, porém o item faltante era privilégio de leitura na entidade conexão.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
SA-08121319-0 Profile Picture

SA-08121319-0 4

#1
Calum MacFarlane Profile Picture

Calum MacFarlane 4

#3
Alex Fun Wei Jie Profile Picture

Alex Fun Wei Jie 2

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans