CRM Online, Create Appointments, Permissions

(0) Share

Report

Posted on by bernhards

417

Unfortunately we encountered the next error when creating a appointment.

<s:Envelope xmlns:s="schemas.xmlsoap.org/.../envelope"><s:Body><s:Fault>
<faultcode>s:Client</faultcode>
<faultstring xmlns:xml="www.w3.org/.../namespace" xml:lang="en-US">
SecLib::AccessCheckEx failed. Returned hr = -2147187962,
ObjectID: 20dc2cba-1095-e511-80f3-3863bb354ff0,
OwnerId: 7453bfec-c591-e511-80f5-3863bb34fa70, 
OwnerIdType: 8 and CallingUser: 7453bfec-c591-e511-80f5-3863bb34fa70. ObjectTypeCode: 4703,
objectBusinessUnitId: 9a8f60bb-048f-e511-80f4-3863bb349770,
AccessRights: ReadAccess
</faultstring><detail><OrganizationServiceFault xmlns="schemas.microsoft.com/.../Contracts">
<ErrorCode>-2147187962</ErrorCode><ErrorDetails />
<Message>SecLib::AccessCheckEx failed. Returned hr = -2147187962,
ObjectID: 20dc2cba-1095-e511-80f3-3863bb354ff0,
OwnerId: 7453bfec-c591-e511-80f5-3863bb34fa70,
OwnerIdType: 8 and CallingUser: 7453bfec-c591-e511-80f5-3863bb34fa70. ObjectTypeCode: 4703,
objectBusinessUnitId: 9a8f60bb-048f-e511-80f4-3863bb349770,
AccessRights: ReadAccess </Message><Timestamp>2016-02-08T10:50:50.2009213Z</Timestamp>
<InnerFault><ErrorCode>-2147187962</ErrorCode><ErrorDetails /><Message>SecLib::AccessCheckEx failed. Returned hr = -2147187962,
ObjectID: 20dc2cba-1095-e511-80f3-3863bb354ff0,
OwnerId: 7453bfec-c591-e511-80f5-3863bb34fa70,
OwnerIdType: 8 and CallingUser: 7453bfec-c591-e511-80f5-3863bb34fa70. ObjectTypeCode: 4703,
objectBusinessUnitId: 9a8f60bb-048f-e511-80f4-3863bb349770,
AccessRights: ReadAccess </Message><Timestamp>2016-02-08T10:50:50.2009213Z</Timestamp><InnerFault xmlns:i="www.w3.org/.../XMLSchema-instance" i:nil="true" />
<TraceText xmlns:i="www.w3.org/.../XMLSchema-instance" i:nil="true" /></InnerFault><TraceText>[Microsoft.Crm.ObjectModel: Microsoft.Crm.ObjectModel.SyncWorkflowExecutionPlugin]
[2bdc2cba-1095-e511-80f3-3863bb354ff0: ]
</TraceText></OrganizationServiceFault></detail></s:Fault></s:Body></s:Envelope>

The message says it has no rights for objectTypeCode 4703

I looked this (old) site msdynamicscrmblog.wordpress.com/.../ and it should be workflows/process.

But I have already changed the permissions on process to the whole business unit.

AND THE MOST IMPORTANT QUESTION: Is there any chance/workaround/menu where I can see what are the permissions that the user is missing? Since I don't want to look in the internet for old posts in hope, that this could maybe fix the issue...

Categories:

Administration and Setup

All responses (18)

Answers (2)

Verified answer

bernhards 417 on at

Like (0)

Report

RE: CRM Online, Create Appointments, Permissions

Thanks for your help all. I found the problem, but forgot to answer the solution. I had to give the user organisation rights for the processes.

Now sure why business unit rights are not enough, but now it is working. The only problem is now when they want to create an appointment with some regarding. When they press on regarding they don't have the permissions. But the main problem is solved now.
Suggested answer

Community Member Microsoft Employee on at

Like (0)

Report

RE: CRM Online, Create Appointments, Permissions

If it helps I have read and append to as organisational and the rest at user level.
bernhards 417 on at

Like (0)

Report

RE: CRM Online, Create Appointments, Permissions

It's not working... So the error says it's the process. That means the user does not have the permissions to do the process part. I am correct? Maybe I have to give the whole organisation permission to the process session?
bernhards 417 on at

Like (0)

Report

RE: CRM Online, Create Appointments, Permissions

There is only one business rule at the moment which includes all existing users. The process only triggers when the field "subject" is changed. I've updated this security setting now:

Now I am waiting for response if this is working.
Suggested answer

Community Member Microsoft Employee on at

Like (0)

Report

RE: CRM Online, Create Appointments, Permissions

Might also be worth checking that you haven't got an infinite loop in here, ie The workflow triggers on update and then does an update etc etc. What fields are listed in the update field trigger list. Any of those being updated?
Suggested answer

Community Member Microsoft Employee on at

Like (0)

Report

RE: CRM Online, Create Appointments, Permissions

So you need to check that the user that is doing the creation has the write and read privileges to the appointment record. Also need to check that the owner of the actual activity/appointment is in the same business unit as this user.
bernhards 417 on at

Like (0)

Report
RE: CRM Online, Create Appointments, Permissions

You are right, there is one process:

Scope: Organization Start when: After [x] Record is created [x] Record fields change Execute as: The user who made the changes to the record Update: Appointment properties
Verified answer

Community Member Microsoft Employee on at

Like (1)

Report

RE: CRM Online, Create Appointments, Permissions

Do you have anything that is triggered on the creation of an activity / appointment , ie Workflow or Plugin
bernhards 417 on at

Like (0)

Report

RE: CRM Online, Create Appointments, Permissions

The message pops up when they want to save the appointment. The view to the form is working.
bernhards 417 on at

Like (0)

Report
RE: CRM Online, Create Appointments, Permissions

Not fixed... again an error:

<s:Envelope xmlns:s="schemas.xmlsoap.org/.../envelope"><s:Body><s:Fault><faultcode>s:Client</faultcode><faultstring xmlns:xml="www.w3.org/.../namespace" xml:lang="en-US">SecLib::AccessCheckEx failed. Returned hr = -2147187962, ObjectID: 20dc2cba-1095-e511-80f3-3863bb354ff0, OwnerId: d1e23c5c-c691-e511-80f5-3863bb34fa70, OwnerIdType: 8 and CallingUser: d1e23c5c-c691-e511-80f5-3863bb34fa70. ObjectTypeCode: 4703, objectBusinessUnitId: 9a8f60bb-048f-e511-80f4-3863bb349770, AccessRights: ReadAccess </faultstring><detail><OrganizationServiceFault xmlns="schemas.microsoft.com/.../Contracts"><ErrorCode>-2147187962</ErrorCode><ErrorDetails /><Message>SecLib::AccessCheckEx failed. Returned hr = -2147187962, ObjectID: 20dc2cba-1095-e511-80f3-3863bb354ff0, OwnerId: d1e23c5c-c691-e511-80f5-3863bb34fa70, OwnerIdType: 8 and CallingUser: d1e23c5c-c691-e511-80f5-3863bb34fa70. ObjectTypeCode: 4703, objectBusinessUnitId: 9a8f60bb-048f-e511-80f4-3863bb349770, AccessRights: ReadAccess </Message><Timestamp>2016-02-11T13:04:55.8133423Z</Timestamp><InnerFault><ErrorCode>-2147187962</ErrorCode><ErrorDetails /><Message>SecLib::AccessCheckEx failed. Returned hr = -2147187962, ObjectID: 20dc2cba-1095-e511-80f3-3863bb354ff0, OwnerId: d1e23c5c-c691-e511-80f5-3863bb34fa70, OwnerIdType: 8 and CallingUser: d1e23c5c-c691-e511-80f5-3863bb34fa70. ObjectTypeCode: 4703, objectBusinessUnitId: 9a8f60bb-048f-e511-80f4-3863bb349770, AccessRights: ReadAccess </Message><Timestamp>2016-02-11T13:04:55.8133423Z</Timestamp><InnerFault xmlns:i="www.w3.org/.../XMLSchema-instance" i:nil="true" /><TraceText xmlns:i="www.w3.org/.../XMLSchema-instance" i:nil="true" /></InnerFault><TraceText>[Microsoft.Crm.ObjectModel: Microsoft.Crm.ObjectModel.SyncWorkflowExecutionPlugin] [2bdc2cba-1095-e511-80f3-3863bb354ff0: ] </TraceText></OrganizationServiceFault></detail></s:Fault></s:Body></s:Envelope>

I think the reason must be the ObjectTypeCode 4703...