Skip to main content

Notifications

Announcements

No record found.

Microsoft Dynamics CRM (Archived)

What are the minimum OPERATIONAL permissions for CRM?

Posted on by 13,726

So I've found the documentation for minimum permissions to install Dynamics CRM new, but I'm having trouble finding minimum permissions for continuing operations of Dynamics CRM and still be able to do deployment administration work like restoring organizations and the like. 

Can anyone point me to MS's documentation on those permissions?

*This post is locked for comments

  • Wayne Walton Profile Picture
    Wayne Walton 13,726 on at
    RE: What are the minimum OPERATIONAL permissions for CRM?

    Thanks Sartaj!

    And Tom, thanks for your help.  :)

  • Verified answer
    Sartaj Profile Picture
    Sartaj 880 on at
    RE: What are the minimum OPERATIONAL permissions for CRM?

    The minimum permissions/rights for a user which can act as deployment manager, that is he/she is able to Create, import, Enable, disable and edit an organization are as follows:

    I have breakdown required permissions component wise.

    SQL Server:

    On the computer that is running Microsoft SQL Server, the user must be a member of the following groups:

    • The local administrators group
    • The Microsoft SQL Server administrator group (i.e,SysAdmin)

    Reporting Server:

    On the computer that is running SQL Server Reporting Services, the user must have the following minimum privileges:

    • Content Manager Role privileges at the root folder level
    • System Administrator privileges at the site-wide setting level

    Microsoft Dynamics CRM Server:

    On the computer where deployment manager is installed the user must be member of following group:

    • The local administrators group
    • Add the user as a deployment administrator.

    Active Directory service:

    The user must have permissions in the following Microsoft Dynamics CRM security groups in Active Directory:

    • PrivReportingGroup
    • PrivUserGroup
    • SQLAccessGroup
    • ReportingGroup
    • UserGroup    

           Below are the required permissions in the security groups:

    • Permissions
      • Read
      • Write
      • Add/Remove self as member
    • Advanced permissions
      • List Contents
      • Read All Properties
      • Write All Properties
      • Read Permissions
      • Modify Permissions
      • All Validated Writes
      • Add/Remove self as member

     Let me know if this not suffice your requirement or any further clarification required.

    Sartaj 

  • ThomasN Profile Picture
    ThomasN 3,190 on at
    RE: What are the minimum OPERATIONAL permissions for CRM?

    Hi Wayne,

    Sorry I do not know the specifics on that with On-Prem, my work has focused Online. If no response here open a support ticket with Microsoft and they should give you some clarity.

  • Wayne Walton Profile Picture
    Wayne Walton 13,726 on at
    RE: What are the minimum OPERATIONAL permissions for CRM?

    Thanks, but that's not what I'm looking for either.  I need to find the minimum administrative access to manage deployment of new organizations, disabling old one, etc. after CRM has been installed.  

    So this is from a server/deployment administrator's perspective, after software has been installed.  for example, do they still need full admin access to the server, now that the software has been installed, or can we limit them to access to IIS?

  • Suggested answer
    ThomasN Profile Picture
    ThomasN 3,190 on at
    RE: What are the minimum OPERATIONAL permissions for CRM?

    Hi Wayne,

    Below is a link to an article that I used as a guideline and still serves true. These are the bare minimum required for working or reading in CRM.

    rajeevpentyala.wordpress.com/.../minimum-privileges-required-to-access-crm-application

    I have gone down that meticulous path to limit access from scratch, I do not recommend it. There are relationships and security settings that are unexpected when working with CRM. Best is to use a similar sample role, copy and then start removing the function that is absolutely not necessary. Then keep this link as guidelines for where not to remove access.

    Let us know if this helps. Thanks.

    -Tom

  • Wayne Walton Profile Picture
    Wayne Walton 13,726 on at
    RE: What are the minimum OPERATIONAL permissions for CRM?

    Yah, I've been through that, but it only gives requirements for installation, and for the service accounts.  

    I've got a client that has a lot of security separation between server admin, app admin, and SQL admin, and none of them want to give a user the same level of access as was required to install.

  • Suggested answer
    ThomasN Profile Picture
    ThomasN 3,190 on at
    RE: What are the minimum OPERATIONAL permissions for CRM?

    Hi Wayne, Thank you for reaching out. I would guess you are talking about CRM On-Premise since you mentions "restoring organizations". If that is correct please check out this TechNet link for security settings. Sorry if you already found that one. Let me know if this works.

    -Tom

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

December Spotlight Star - Muhammad Affan

Congratulations to a top community star!

Top 10 leaders for November!

Congratulations to our November super stars!

Tips for Writing Effective Suggested Answers

Best practices for providing successful forum answers ✍️

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,269 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,198 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans