web
You’re offline. This is a read only version of the page.
close
Skip to main content
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Microsoft Dynamics CRM (Archived) / What are the minimum O...
Microsoft Dynamics CRM (Archived)

What are the minimum OPERATIONAL permissions for CRM?

(0) ShareShare
ReportReport
Posted on by Wayne Walton 13,728

So I've found the documentation for minimum permissions to install Dynamics CRM new, but I'm having trouble finding minimum permissions for continuing operations of Dynamics CRM and still be able to do deployment administration work like restoring organizations and the like. 

Can anyone point me to MS's documentation on those permissions?

*This post is locked for comments

I have the same question (0)
  • Suggested answer
    ThomasN Profile Picture
    ThomasN 3,190 on at
    RE: What are the minimum OPERATIONAL permissions for CRM?

    Hi Wayne, Thank you for reaching out. I would guess you are talking about CRM On-Premise since you mentions "restoring organizations". If that is correct please check out this TechNet link for security settings. Sorry if you already found that one. Let me know if this works.

    -Tom

  • Wayne Walton Profile Picture
    Wayne Walton 13,728 on at
    RE: What are the minimum OPERATIONAL permissions for CRM?

    Yah, I've been through that, but it only gives requirements for installation, and for the service accounts.  

    I've got a client that has a lot of security separation between server admin, app admin, and SQL admin, and none of them want to give a user the same level of access as was required to install.

  • Suggested answer
    ThomasN Profile Picture
    ThomasN 3,190 on at
    RE: What are the minimum OPERATIONAL permissions for CRM?

    Hi Wayne,

    Below is a link to an article that I used as a guideline and still serves true. These are the bare minimum required for working or reading in CRM.

    rajeevpentyala.wordpress.com/.../minimum-privileges-required-to-access-crm-application

    I have gone down that meticulous path to limit access from scratch, I do not recommend it. There are relationships and security settings that are unexpected when working with CRM. Best is to use a similar sample role, copy and then start removing the function that is absolutely not necessary. Then keep this link as guidelines for where not to remove access.

    Let us know if this helps. Thanks.

    -Tom

  • Wayne Walton Profile Picture
    Wayne Walton 13,728 on at
    RE: What are the minimum OPERATIONAL permissions for CRM?

    Thanks, but that's not what I'm looking for either.  I need to find the minimum administrative access to manage deployment of new organizations, disabling old one, etc. after CRM has been installed.  

    So this is from a server/deployment administrator's perspective, after software has been installed.  for example, do they still need full admin access to the server, now that the software has been installed, or can we limit them to access to IIS?

  • ThomasN Profile Picture
    ThomasN 3,190 on at
    RE: What are the minimum OPERATIONAL permissions for CRM?

    Hi Wayne,

    Sorry I do not know the specifics on that with On-Prem, my work has focused Online. If no response here open a support ticket with Microsoft and they should give you some clarity.

  • Verified answer
    Sartaj Profile Picture
    Sartaj 880 on at
    RE: What are the minimum OPERATIONAL permissions for CRM?

    The minimum permissions/rights for a user which can act as deployment manager, that is he/she is able to Create, import, Enable, disable and edit an organization are as follows:

    I have breakdown required permissions component wise.

    SQL Server:

    On the computer that is running Microsoft SQL Server, the user must be a member of the following groups:

    • The local administrators group
    • The Microsoft SQL Server administrator group (i.e,SysAdmin)

    Reporting Server:

    On the computer that is running SQL Server Reporting Services, the user must have the following minimum privileges:

    • Content Manager Role privileges at the root folder level
    • System Administrator privileges at the site-wide setting level

    Microsoft Dynamics CRM Server:

    On the computer where deployment manager is installed the user must be member of following group:

    • The local administrators group
    • Add the user as a deployment administrator.

    Active Directory service:

    The user must have permissions in the following Microsoft Dynamics CRM security groups in Active Directory:

    • PrivReportingGroup
    • PrivUserGroup
    • SQLAccessGroup
    • ReportingGroup
    • UserGroup    

           Below are the required permissions in the security groups:

    • Permissions
      • Read
      • Write
      • Add/Remove self as member
    • Advanced permissions
      • List Contents
      • Read All Properties
      • Write All Properties
      • Read Permissions
      • Modify Permissions
      • All Validated Writes
      • Add/Remove self as member

     Let me know if this not suffice your requirement or any further clarification required.

    Sartaj 

  • Wayne Walton Profile Picture
    Wayne Walton 13,728 on at
    RE: What are the minimum OPERATIONAL permissions for CRM?

    Thanks Sartaj!

    And Tom, thanks for your help.  :)

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

News and Announcements

Join experts in person to explore low code and AI agents at the Power Platform Community Conference sponsored by Microsoft

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Abhilash Warrier – Community Spotlight

We are honored to recognize Abhilash Warrier as our Community Spotlight honoree for…

Congratulations to the September Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
HR-09070029-0 Profile Picture

HR-09070029-0 2

#1
UllrSki Profile Picture

UllrSki 2

#3
ED-30091530-0 Profile Picture

ED-30091530-0 1

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans