web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

Community site session details

Community site session details

Session Id :
Microsoft Dynamics CRM (Archived)

"You do not have sufficient privileges to open this Lookup dialog box."

(0) ShareShare
ReportReport
Posted on by 12,163

Never encountered this before. One of my security roles does not have the ability to do a simple Advanced Find on an Account when including a Lookup field is part of the filter. What permission governs this ability?

*This post is locked for comments

I have the same question (0)
  • Rob Boyers Profile Picture
    260 on at

    Hi,

    In theory, the user should have read privilege for the entity at the end of the lookup field in question. What entity does the lookup point to?

    Rob

  • Suggested answer
    Lozici Cezar Profile Picture
    890 on at

    Hi Joe,

        Assuming that the lookup field is part of a secondary entity ,as previously suggested by Rob you need to make sure that you have permission to access (should start with a basic READ) this second entity.

       If you are familiar with capturing Verbose Server Traces (Option 1 / Option 2) the easiest way to pinpoint the exact missing privilege is to repro the issue while you have the Verbose Server traces enabled. You should then be able to find in the w3wp - CRM web log(s) the exact missing privilege.

    Thank you for using Microsoft Dynamics CRM Communities

    Cezar Lozici

    Support Engineer

    Microsoft Dynamics CRM

  • Joe Woltering Profile Picture
    12,163 on at

    Rob,

    The Adv. Find is as follows: Account--> Owning User--> Territory =

    The territory lookup is where it fails. Works for other security roles but not this one. As far as I know Territory is an OOB field which is why this doesn't make any sense.

  • Lozici Cezar Profile Picture
    890 on at

    Hi Joe,

       From the looks of your Advanced Find search criteria it seems that you are in fact querying 2 entities: Accounts and System Users. Most likely you are missing the prvReadUser privilege (ID=76FAAD15-BC44-4F4D-84DC-DD1E1DDA74D9).

      To add it just edit the security role of the user in question and add the this privilege (you can find it in the Business Management Tab , under the User entity the 2nd row - Read privilege- ). The only thing left to decide is the depth of this privilege in order to determine if the user can search for users that are part of any Business Unit , the same Business Unit as he is and any child Business Units or just his own Business Unit.

    Thank you for using Microsoft Dynamics CRM Communities

    Cezar Lozici

    Support Engineer

    Microsoft Dynamics CRM

  • Joe Woltering Profile Picture
    12,163 on at

    Yes, that's the strange thing. The security role does have Read privilege to the User entity under Business Management.

  • Suggested answer
    Rob Boyers Profile Picture
    260 on at

    Try using Fiddler to get more information on the missing privilege

    woodsworkblog.wordpress.com/.../crm-2013-diagnosing-access-is-denied-using-fiddler

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
SA-08121319-0 Profile Picture

SA-08121319-0 4

#1
Calum MacFarlane Profile Picture

Calum MacFarlane 4

#3
Alex Fun Wei Jie Profile Picture

Alex Fun Wei Jie 2

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans