You’re offline. This is a read only version of the page.
My question is this. Is there an exact list of the exact permissions needed to install/import into CRM2016?
I've got CRM2016. I have been able to create an organization., delete the organization and now I want to reimport it back. I keep getting a permissions error as follows:
Error| Import Organization (Name=Seattle, Id=5ee802e9-801f-e211-88a2-005056a50b41) failed with Exception:
Microsoft.Crm.CrmException: An error occurred when populating Microsoft CRM user groups. Ensure that CRM user accounts are accessible from the current domain and run the wizard again. View the log file for more information.
at Microsoft.Crm.Tools.Admin.DBImportHelper.MapUsers(Guid organizationId, ICollection`1 users, String reportingGroupName, Boolean usersAlreadyInConfigDB, ExecutionContext context)
at Microsoft.Crm.Tools.Admin.ImportOrganizationInstaller.UpdateOrganizationInfo(Guid organizationId, OrganizationGroupsInfo organizationInfo, String organizationFriendlyName, String organizationUniqueName, Uri reportServerUrl, Int32 PercentUpdateOrganization, ICollection`1 users)
at Microsoft.Crm.Tools.Admin.ImportOrganizationInstaller.Import(Guid organizationId, String organizationUniqueName, String organizationFriendlyName, String sqlServerName, String databaseName, Uri reportServerUrl, ICollection`1 users, MultipleTenancy multipleTenancy)
*This post is locked for comments
Thank you VERY much. You've been very helpful.
For Active Directory permissions, you will need to identify the names of the AD groups. You can get this from either the ConfigSettings table in MSCRM_Config or the respective field names (e.g. ReportingGroupName ) from the 1 record in the OrganizationBase table in the <organisation>_MSCRM) database. If they are different, use the values from ConfigSettings. For an organisation import, you should only need permissions on the ReportingGroup, though to be safe I'd ask for permissions on the other groups too. You need 'Add User or Group' permission on the AD groups
Very nice! What I am after is the exact names of the permissions that need to be set. Does that make sense? We have our AD so locked down that I need to present the access folks the exact data names of the permissions.
The permissions to import an organisation are essentially the same as for installing CRM. What I think you're finding is that the import will attempt to populate the CRM Active Directory groups (e.g. ReportingGroup) for the mapped users, and the account that you're running Deployment Manager with doesn't have the necessary permissions in AD. (Or maybe there is a problem communicating with the Domain Controller.
You don't get this error when creating a new organisation, as no users are added to the new organisation (other than the user running Deployment Manager, who will already be a CRM user so will already be in the AD groups)
Stay up to date on forum activity by subscribing. You can also customize your in-app and email Notification settings across all subscriptions.
#1
André Arnaud de Cal...
291,240
Super User 2024 Season 2
#2
Martin Dráb
230,149
Most Valuable Professional
#3
nmaenpaa
101,156
Share
Report
All responses (
Answers (