web
You’re offline. This is a read only version of the page.
close
Skip to main content
Community site session details

Community site session details

Session Id :
Microsoft Dynamics CRM (Archived)

Activity records visible to users without rights

(0) ShareShare
ReportReport
Posted on by 50

Activity records are visible to users who do not have access rights 

I am using MS CRM 4, upgraded from 3.I have a hierarchical business unit structure.A general user role in the General business unit, has access to their own and their business unit contacts and activites.If a user higher in the organisational structure creates a contact record, it is not visible to the general user. However, if they create an activity against a contact owned by someone in the General business unit (ie. lowest level), it is visible, eventhough it is owned by a user outside of that business unit.This seems to clearly contravene the security model as I understand it.Any assistance would be greatly appreciated.

Many thanks,

Nic

*This post is locked for comments

I have the same question (0)
  • Yaniv Arditi Profile Picture
    3,990 on at
    Re: Activity records visible to users without rights

    Hi Nic,

    What you are experiencing is called 'Cascaded Security Privileges'. Basically, it means that when it comes to activities, If you own the “parent” you own the child. This is true for other relationships as well.
    The Microsoft Dynamics CRM Team blog elaborates about this 'feature' in this blog post.

    Yaniv Arditi

     
  • Nic Malc Profile Picture
    50 on at
    Re: Re: Activity records visible to users without rights

    Hi Yaniv,

    thanks very much for your response - I now understand.

    However, I'm not sure how to deal with it. I am working for an educational charity that has a general participants database. They would now like to fundraise from those participants, but do not want general staff to see the interactions of the fundraisers with the participants. How can I hide them without creating duplicate records with a different owner?

    Many thanks again,

    Nic

     

  • Yaniv Arditi Profile Picture
    3,990 on at
    Re: Re: Re: Activity records visible to users without rights

    One alternative would be revoking all Activity privileges from specific roles. The users will not be able to read nor create any activity, even if he owns the parent record.

    Another alternative: In my experience, the cascading privileges 'rule' does not apply to entities that have referencial relationship with the Account/Contact entity (instead of parental).
    This means that if you create a custom entity named, for example, fund-rasing Interaction and set a referential relationship with Account or Contact (Many fund-rasing Interactions to one Account/Contact), the privileges you set will apply with no exceptions.

    Hope this helps,

    Yaniv Arditi



     

  • Nic Malc Profile Picture
    50 on at
    Re: Re: Re: Re: Activity records visible to users without rights

    Hi Yaniv,

    yes, your ideas are interesting and helpful.

    Thank you for all your assistance today.

    Nic

  • DynamicsMidwest Profile Picture
    25 on at
    Re: Re: Re: Re: Activity records visible to users without rights

    I might have similar situation... any thoughts?

    I have 2 entities - A & B. For entity A, I want a specific role (let us call
    it SERVICE) to be able to see all activities. For entity B, the role SERVICE
    has no access. So, I decided to give entity ACTIVITY read access across
    organization.

    My problem is, role SERVICE can see activities across both entities A & B. I
    only want this role to see activities for entity A.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Abhilash Warrier – Community Spotlight

We are honored to recognize Abhilash Warrier as our Community Spotlight honoree for…

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
HR-09070029-0 Profile Picture

HR-09070029-0 2

#1
UllrSki Profile Picture

UllrSki 2

#3
ED-30091530-0 Profile Picture

ED-30091530-0 1

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans