web
You’re offline. This is a read only version of the page.
close
Skip to main content
Community site session details

Community site session details

Session Id :
Customer experience | Sales, Customer Insights,...
Answered

configure a role for read only access to all entities

(0) ShareShare
ReportReport
Posted on by 10

hi,

I want to create a role for an application user, that can can do following:

1. read all current entities

2. if a new entity is added, the role can still read that entity without re-configure the security role

the closest one is system admin but i dont want to attach system admin to my application user.

Does anyone know how to do this?

I have the same question (0)
  • Suggested answer
    Adrian Begovich Profile Picture
    1,027 Moderator on at
    RE: configure a role for read only access to all entities

    Hi matthew123,

    The security role will need to be modified to provide read privileges to the new custom entity.

  • matthew123 Profile Picture
    10 on at
    RE: configure a role for read only access to all entities

    thanks for replying.

    assuming i have the role created, and then if I add a new custom entity, can my application user still be able to read the custom entity without making any changes to the role?

  • Suggested answer
    Adrian Begovich Profile Picture
    1,027 Moderator on at
    RE: configure a role for read only access to all entities

    Hi Matthew123,

    Create a new security role and assign it to the application user. Make sure that user only has this security role as security role privileges are cumulative. 

    The security role requires these privileges:

    Core Records

    • {All Entities}: Read(Organization)
    • User Entity UI Settings: Create(User), Read(User), Write(User)

    Business Management

    • User Settings: Read(User)

    Customization

    • Customizations: Read(Organization)
    • System Form: Read(Organization)
    • View: Read(Organization)
    • Web Resource: Read(Organization)

    It is helpful to keep in mind the minimum privileges you need to define for some common tasks. These include:

    Logging in to Microsoft Dynamics CRM Online

    • To render the home page: prvReadWebResource, prvReadCustomization
    • To render an entity grid (that is, to view lists of records and other data): Read privilege on the entity, prvReadUserSettings, prvReadQuery
    • To view single entities in detail: Read privilege on the entity, prvReadSystemForm, prvCreateUserEntityUISettings, prvReadUserEntityUISettings

    Logging in to Microsoft Dynamics CRM Online for Outlook

    • To render navigation for Microsoft Dynamics CRM Online and all Microsoft Dynamics CRM Online buttons: prvReadEntity, prvReadQuery
    • To render an entity grid: Read privilege on the entity, prvReadCustomization, prvReadWebResource, prvReadUserQuery
    • To render entities: Read privilege on the entity, prvReadSystemForm, prvCreateUserEntityUISettings, prvReadUserEntityUISettings, prvWriteUserEntityUISettings

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Andrés Arias – Community Spotlight

We are honored to recognize Andrés Arias as our Community Spotlight honoree for…

Leaderboard > Customer experience | Sales, Customer Insights, CRM

#1
Rishabh Kanaskar Profile Picture

Rishabh Kanaskar 258

#2
Daniyal Khaleel Profile Picture

Daniyal Khaleel 210

#3
Tom_Gioielli Profile Picture

Tom_Gioielli 77 Super User 2025 Season 2

Last 30 days Overall leaderboard

Product updates

Dynamics 365 release plans