Principal User is missing prvReadSolution privilege

(0) Share

Report

Posted on by Community Member

I created a full DB backup on an org that I have system admin rights on. I then performed a restore to a new DB on the same server using the full backup file to restore the DB. I then performed an org import using the newly created DB from the restore. I received no errors and everything showed success. However when I attempt to access the url for that org I get a 'Principal user is missing prvReadSolution privilege' error.

I performed the same steps on another server to create a different org (but using the same backup DB file from the other server) and it worked fine.

Is there a potential limit on how many orgs can exist on a server perhaps? Currently there is 9 including the one not working

Thank you,

*This post is locked for comments

I have the same question (0)

All responses (5)

Answers (0)

Josh Thompson 1,115 on at

Like (0)

Report

I'm not familiar with a limit other than potential licensing. To fix the issue you can try going to Settings - Administration - Security Roles - Customization tab. Grant at least read permissions to the "Solution" setting near the bottom.

hope that helps.

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Thanks .Unfortunately I cannot get to settings. The error occurs on my login that has admin rights and therefore I can't get into CRM.

Was this reply helpful? Yes No
Suggested answer

Josh Thompson 1,115 on at

Like (0)

Report

Ah, that is a problem. You can try querying the database and see if the solution permissions exist.

***DISCLAIMER: THIS IS UNSUPPORTED***

This is unsupported and I would use it only to debug, I wouldn't suggest you change anything. There are two tables that support this, RoleBase which has the role you want and privilege which will have the prvReadSolution privilege you are not authorized for.

select RoleId from RoleBase where Name = 'System Administrator'

select PrivilegeId from privilege where Name = 'prvReadSolution'

Once you have the two guid's replace them in this query.

select * from RolePrivileges where RoleId = '<RoleId>' and PrivilegeId = '<PrivilegeId>'

If you have a row there should be a solutionid in there.

select OrganizationIdName, Description, UniqueName, FriendlyName from Solution where SolutionId = '<SolutionId>'

This will tell you what solution they have permission to. This should return one row.

If you have no rows, then you could look at other restores that have worked and try to compare. At the end of the day, you'll probably need to open a support incident with MS to get this fully resolved.

Was this reply helpful? Yes No
Robinson Moses on at

Like (0)

Report

Hello,

Go to C:\ProgramFiles\MicrosoftdynamicsCRM\CRMWeb\Web.config, open the web.config with the notepad and look for DevErrors, change the Off to On then browse CRM again and post the error message in here.

The cause could be CRM application pool account was mapped to a CRM user during the import.

Please let me know.

Thanks,

Rob Moses

Was this reply helpful? Yes No
Robinson Moses on at

Like (0)

Report

Hello,

Where you able to get the Dev errors turn On, Let us know if you have trouble doing so.

Rob Moses

Was this reply helpful? Yes No