Microsoft Dynamics 365 | Integration, Dataverse...

systems admin user cannot be assigned read/write access to environment

(2) Share

Report

Posted on by Nettsales

This is a strange one. I have two users who are both Azure Global Administrators. They have the same secuirity role as all other users assigned in the environment yet their access type is Administrative.

If I change this to Read/write then after about 5 minutes it changes itself back to administrative. As a test, I removed the Global Admin role in azure and they could login without issue. As soon as I turned that role back on, the users reverted to administration users.

I have checked security roles, etc and proved to my satisfaction that if they do not have the Global Admin role, that all works fine.

Anyone know of a fix/solution/hack to get these users logged into the system as read/write users.

Just to note that immediately after changing their access to read/write, they can use the system for a while before being turned back to administrative users.

I have the same question (0)

All responses (2)

Answers (0)

Suggested answer

Amit Katariya007 10,409 Super User 2025 Season 2 on at

Like (2)

Report

Are you saying users are getting all the roles back after some time removals of it? If yes then check if your CRM environment is associated with any Azure based sync or any third party tool or system because that may the reason for this role synchronisation.

Was this reply helpful? Yes No
Nettsales 20 on at

Like (0)

Report

No, what I am saying is that there are two (or more) access types users may have. Read/Write access level gives users full access to update records in line with their allocated security roles. Administration access level does not allow the user to edit records at all and may not be able to read much either.

This is completely different to security roles in CRM and Administration levels in Azure.

But the two people affected are both Global Admins in Azure. If I remove their Global Admin role, they are able to be set and retain the read/write access level but as soon as I add their global admin role back, I can set them to read/write access level but the system changes this to administration soon after.

My goal is to allow these users to be Global Admins while also being able to interact with the database.

Was this reply helpful? Yes No