What are the minimum OPERATIONAL permissions for CRM?

(0) Share

Report

Posted on by Wayne Walton

13,726

So I've found the documentation for minimum permissions to install Dynamics CRM new, but I'm having trouble finding minimum permissions for continuing operations of Dynamics CRM and still be able to do deployment administration work like restoring organizations and the like.

Can anyone point me to MS's documentation on those permissions?

*This post is locked for comments

All responses (7)

Answers (1)

Wayne Walton 13,726 on at

Like (0)

Report

RE: What are the minimum OPERATIONAL permissions for CRM?

Thanks Sartaj!

And Tom, thanks for your help. :)
Verified answer

Sartaj 880 on at

Like (0)

Report
RE: What are the minimum OPERATIONAL permissions for CRM?

The minimum permissions/rights for a user which can act as deployment manager, that is he/she is able to Create, import, Enable, disable and edit an organization are as follows:

I have breakdown required permissions component wise.

SQL Server:

On the computer that is running Microsoft SQL Server, the user must be a member of the following groups:

The local administrators group

The Microsoft SQL Server administrator group (i.e,SysAdmin)

Reporting Server:

On the computer that is running SQL Server Reporting Services, the user must have the following minimum privileges:

Content Manager Role privileges at the root folder level

System Administrator privileges at the site-wide setting level

Microsoft Dynamics CRM Server:

On the computer where deployment manager is installed the user must be member of following group:

The local administrators group

Add the user as a deployment administrator.

Active Directory service:

The user must have permissions in the following Microsoft Dynamics CRM security groups in Active Directory:

PrivReportingGroup

PrivUserGroup

SQLAccessGroup

ReportingGroup

UserGroup

Below are the required permissions in the security groups:

Permissions

Read

Write

Add/Remove self as member

Advanced permissions

List Contents

Read All Properties

Write All Properties

Read Permissions

Modify Permissions

All Validated Writes

Add/Remove self as member

Let me know if this not suffice your requirement or any further clarification required.

Sartaj
ThomasN 3,190 on at

Like (0)

Report

RE: What are the minimum OPERATIONAL permissions for CRM?

Hi Wayne,

Sorry I do not know the specifics on that with On-Prem, my work has focused Online. If no response here open a support ticket with Microsoft and they should give you some clarity.
Wayne Walton 13,726 on at

Like (0)

Report

RE: What are the minimum OPERATIONAL permissions for CRM?

Thanks, but that's not what I'm looking for either. I need to find the minimum administrative access to manage deployment of new organizations, disabling old one, etc. after CRM has been installed.

So this is from a server/deployment administrator's perspective, after software has been installed. for example, do they still need full admin access to the server, now that the software has been installed, or can we limit them to access to IIS?
Suggested answer

ThomasN 3,190 on at

Like (0)

Report

RE: What are the minimum OPERATIONAL permissions for CRM?

Hi Wayne,

Below is a link to an article that I used as a guideline and still serves true. These are the bare minimum required for working or reading in CRM.

rajeevpentyala.wordpress.com/.../minimum-privileges-required-to-access-crm-application

I have gone down that meticulous path to limit access from scratch, I do not recommend it. There are relationships and security settings that are unexpected when working with CRM. Best is to use a similar sample role, copy and then start removing the function that is absolutely not necessary. Then keep this link as guidelines for where not to remove access.

Let us know if this helps. Thanks.

-Tom
Wayne Walton 13,726 on at

Like (0)

Report

RE: What are the minimum OPERATIONAL permissions for CRM?

Yah, I've been through that, but it only gives requirements for installation, and for the service accounts.

I've got a client that has a lot of security separation between server admin, app admin, and SQL admin, and none of them want to give a user the same level of access as was required to install.
Suggested answer

ThomasN 3,190 on at

Like (0)

Report

RE: What are the minimum OPERATIONAL permissions for CRM?

Hi Wayne, Thank you for reaching out. I would guess you are talking about CRM On-Premise since you mentions "restoring organizations". If that is correct please check out this TechNet link for security settings. Sorry if you already found that one. Let me know if this works.

-Tom