As per the title, i am getting the error "Missing prvReadActivity privilege on Letter entity" when saving an email even though I am a System Admin
The full Error message is:
Exception Message: Principal user (Id=XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX, type=8, roleCount=5, privilegeCount=564, accessMode=1(Setup/Stub user with filtered privileges from associated roles. Consider changing user AccessMode to Full (without privilege filtering))), is missing prvReadActivity privilege (Id=650c14fe-3521-45fe-a000-84138688e45d) on OTC=4207 for entity 'letter' (LocalizedName='Letter'). context.Caller=deaa60db-1a0a-ea11-a811-000d3a7ed67d
ErrorCode: -2147220960
HexErrorCode: 0x80040220
ErrorDetails:
0: prvReadActivity
1: letter
ApiExceptionSourceKey: Step/Microsoft.Crm.Extensibility.ImageRetrievalStep
ApiStepKey: XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX
ApiDepthKey: 1
ApiActivityIdKey: XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX
ApiPluginSolutionNameKey: System
ApiStepSolutionNameKey: System
ApiExceptionCategory: ClientError
ApiExceptionMessageName: PrivilegeDenied
ApiExceptionHttpStatusCode: 403
HelpLink: go.microsoft.com/.../
(NOTE: I have tried this link to no avail)
Activity Id: XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX
Any advice is appreciated.
Hello,
Can you look into the below things.
1. Check what is scope of the workflow.
2. As well as the is it "Executing" as the "owner of the workflow". If it is yes then the workflow will run as the permission which is assigned to the owner of the workflow.
3. What is "Run in user's context" Value of Plugin step.
Because if you are an Admin then there should not be any issue with the execution.
Thank you,
Amit katariya
Hi,
I have checked all workflows and plugin steps (there were a lot of these) and nothing is referencing the principle user that has left. I checked in the plugin reg tool too to make sure no step was impersonating as them too, to no avail.
I have a call open with MS and they cannot seem to find the cause, so any suggestions are most appreciated as this is effecting our live system.
Hi,
You should look for Workflow & Plugin steps.
Please mark my answer verified if this is helpful!
Regards,
Bipin Kumar
Follow my Blog: xrmdynamicscrm.wordpress.com/
Yes, the Principal user has left and had their license removed it appears, I therefore need to track down what is causing this and change it to another user, or our admin user.
Are there any pointers from the error as to where I should check?
I have looked at all workflows which are in another person's name, from what I can see in the plugin reg tool no steps are impersonating as this user.
Hi,
Did you verify the User GUID in error to know if it's actually you or some other user?
Principal user (Id=XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX
Sometimes we configure plugin/workflow which runs under different user and that user does not have sufficient permission. So please verify the User Record ID and then let me know what you observe.
Please mark my answer verified if this is helpful!
Regards,
Bipin Kumar
Follow my Blog: xrmdynamicscrm.wordpress.com/
Hey bud,
Just confirming you're assigned a System admin manually against your user record in Dynamics? You're not inheriting a System Admin role from a AD Connected Dynamics 365 Team are you?
Stay up to date on forum activity by subscribing. You can also customize your in-app and email Notification settings across all subscriptions.
André Arnaud de Cal... 291,240 Super User 2024 Season 2
Martin Dráb 230,149 Most Valuable Professional
nmaenpaa 101,156